@prosopo/provider 5.15.0 → 5.17.0

package/dist/tasks/interactiveCaptcha/interactiveCaptchaManager.js

@@ -0,0 +1,423 @@
+import { buildAllWindowIncrements } from "../../util/usageCounters.js";
+import { rawTlsSignalsFromRecord } from "../../api/rawTlsSignalsMiddleware.js";
+import { getCompositeIpAddress, getIpAddressFromComposite } from "../../compositeIpAddress.js";
+import { deepValidateIpAddress } from "../../util.js";
+import { isClientSessionMismatch, toStoredClientMetaData } from "../../utils/clientMetaData.js";
+import { deriveTrafficPolicies } from "../../utils/devicePlatform.js";
+import { computeDnsAsymmetry, enrichDnsEvent, getIpInfoAsn } from "../dnsEvent/enrichDnsEvent.js";
+import { CaptchaManager } from "../captchaManager.js";
+import { DecisionMachineRunner } from "../decisionMachine/decisionMachineRunner.js";
+import { computeFrictionlessScore } from "../frictionless/frictionlessTasksUtils.js";
+import { checkPowSignature } from "../powCaptcha/powTasksUtils.js";
+import { normaliseEmailForMatching } from "../spam/evaluateEmailSpamRules.js";
+import { ProsopoApiError, ProsopoEnvError } from "@prosopo/common";
+import { ApiParams, CaptchaStatus, DecisionMachineDecision, POW_SEPARATOR, ResultReason, SimdReadingsStage, isBlockingCaptchaResult } from "@prosopo/types";
+import { stringToHex, u8aToHex } from "@polkadot/util";
+import { describeMatchedRule } from "@prosopo/user-access-policy";
+import { assertCoordsSafe, at, extractData, verifyRecency } from "@prosopo/util";
+//#region src/tasks/interactiveCaptcha/interactiveCaptchaManager.ts
+/**
+* Shared pipeline for the captcha types a human solves on screen (puzzle,
+* icon-order). Subclasses supply the record accessors and grading; minting,
+* submission bookkeeping and server verification live here.
+*/
+var InteractiveCaptchaManager = class extends CaptchaManager {
+	constructor(db, pair, config, logger, usageCounters) {
+		super(db, pair, config, logger);
+		this.POW_SEPARATOR = POW_SEPARATOR;
+		this.decisionMachineRunner = new DecisionMachineRunner(db);
+		this.usageCounters = usageCounters ?? null;
+	}
+	mintChallenge(userAccount, dappAccount) {
+		const requestedAtTimestamp = Date.now();
+		const challenge = `${requestedAtTimestamp}___${userAccount}___${dappAccount}___${Math.floor(Math.random() * 1e6)}`;
+		return {
+			challenge,
+			providerSignature: u8aToHex(this.pair.sign(stringToHex(challenge))),
+			requestedAtTimestamp
+		};
+	}
+	/**
+	* Grades a user's submission and records the outcome on the captcha and
+	* session records. Returns whether the solution was correct.
+	*/
+	async submitInteractiveCaptchaSolution(submission) {
+		const { challenge, userTimestampSignature, behavioralData, simdReadings } = submission;
+		checkPowSignature(challenge, submission.providerChallengeSignature, this.pair.address, ApiParams.challenge);
+		const challengeSplit = challenge.split(this.POW_SEPARATOR);
+		const timestamp = Number.parseInt(at(challengeSplit, 0));
+		const userAccount = at(challengeSplit, 1);
+		checkPowSignature(timestamp.toString(), userTimestampSignature, userAccount, ApiParams.timestamp);
+		const challengeRecord = await this.getRecordByChallenge(challenge);
+		if (!challengeRecord) {
+			this.logger.debug(() => ({ msg: `No record of this challenge: ${challenge}` }));
+			return false;
+		}
+		const { coords, saltDecodeError } = this.decodeSaltCoords(submission.salt);
+		if (!await this.claimSubmission(challengeRecord)) {
+			this.logger.debug(() => ({ msg: `Challenge already submitted: ${challenge}` }));
+			return false;
+		}
+		if (saltDecodeError) {
+			await this.recordSubmissionResult(challengeRecord, {
+				status: CaptchaStatus.disapproved,
+				reason: ResultReason.CAPTCHA_INVALID_SALT
+			}, userTimestampSignature, void 0);
+			return false;
+		}
+		if (!verifyRecency(challenge, submission.timeout)) {
+			await this.recordSubmissionResult(challengeRecord, {
+				status: CaptchaStatus.disapproved,
+				reason: ResultReason.CAPTCHA_INVALID_TIMESTAMP
+			}, userTimestampSignature, coords);
+			return false;
+		}
+		const correct = submission.isCorrect(challengeRecord);
+		const result = correct ? { status: CaptchaStatus.approved } : {
+			status: CaptchaStatus.disapproved,
+			reason: ResultReason.CAPTCHA_INVALID_SOLUTION
+		};
+		if (correct && this.usageCounters) this.usageCounters.incrManyAsync(at(challengeSplit, 2), buildAllWindowIncrements("solved", this.captchaType, submission.ipAddress.address, userAccount));
+		await submission.persistInteraction();
+		const decodedPayloads = await this.decodeSubmissionPayloads(challengeRecord.sessionId, {
+			behavioural: behavioralData,
+			simd: simdReadings
+		});
+		if (behavioralData) try {
+			const decryptedData = decodedPayloads.behavioural;
+			if (decryptedData) {
+				this.logger?.info(() => ({
+					msg: "Behavioral analysis completed",
+					data: {
+						userAccount,
+						dappAccount: at(challengeSplit, 2),
+						challenge,
+						mouseEventsCount: decryptedData.collector1?.length || 0,
+						touchEventsCount: decryptedData.collector2?.length || 0,
+						clickEventsCount: decryptedData.collector3?.length || 0,
+						scrollEventsCount: decryptedData.collector4?.length || 0,
+						deviceCapability: decryptedData.deviceCapability,
+						captchaResult: correct ? "passed" : "failed"
+					}
+				}));
+				const packedData = {
+					c1: decryptedData.collector1 || [],
+					c2: decryptedData.collector2 || [],
+					c3: decryptedData.collector3 || [],
+					c4: decryptedData.collector4 || [],
+					d: decryptedData.deviceCapability
+				};
+				await this.updateRecord(challenge, {
+					behavioralDataPacked: packedData,
+					deviceCapability: decryptedData.deviceCapability
+				});
+			}
+		} catch (error) {
+			this.logger?.error(() => ({
+				msg: "Failed to process behavioral data",
+				err: error
+			}));
+		}
+		const storedClientMetaData = toStoredClientMetaData(submission.clientMetaData);
+		if (storedClientMetaData) await this.updateRecord(challenge, { clientMetaData: storedClientMetaData });
+		await this.recordSubmissionResult(challengeRecord, result, userTimestampSignature, coords, storedClientMetaData);
+		if (challengeRecord.sessionId && decodedPayloads.simd) await this.recordSessionSimdReadingsIfAbsentWithCache(challengeRecord.sessionId, decodedPayloads.simd, SimdReadingsStage.submit);
+		return correct;
+	}
+	/** Invalid salt disapproves the submission rather than being ignored. */
+	decodeSaltCoords(salt) {
+		if (!salt) return {};
+		try {
+			const extractedData = extractData(salt);
+			if (extractedData.length < 2) return {};
+			const coords = [[[extractedData[0], extractedData[1]]]];
+			assertCoordsSafe(coords, "coords");
+			return { coords };
+		} catch (error) {
+			this.logger.warn(() => ({
+				msg: "Failed to extract coordinates from salt",
+				error,
+				salt
+			}));
+			return { saltDecodeError: error };
+		}
+	}
+	async recordSubmissionResult(challengeRecord, result, userSignature, coords, clientMetaData) {
+		await this.updateSubmissionResult(challengeRecord.challenge, result, userSignature, coords);
+		if (challengeRecord.sessionId) await this.updateSessionRecordWithCache(challengeRecord.sessionId, {
+			userSubmitted: true,
+			result,
+			...isBlockingCaptchaResult(this.captchaType, result) && { blocked: true },
+			...clientMetaData && { clientMetaData }
+		});
+	}
+	/**
+	* The post-solve gate the site's server calls: decides whether the token
+	* the widget was given is honoured.
+	*
+	* @param dappAccount - the dapp that is requesting the captcha
+	* @param challenge - the challenge string
+	* @param timeout - milliseconds allowed between submit and verify
+	* @param env - provider environment
+	* @param ip - optional IP address for validation
+	* @param userAccessRulesStorage - storage for querying user access policies
+	* @param email
+	* @param spamEmailDomainCheckingEnabled
+	* @param spamFilter
+	* @param trafficFilter
+	* @param storeMetadata - when true, persists the dapp-server-provided
+	*   `email` on the captcha record for spam-rate analysis.
+	* @param clientSessionId - the session id the site rendered the widget
+	*   with. When supplied, the solve must carry the same value in its
+	*   `clientMetaData` or it is disapproved.
+	*/
+	async serverVerifyInteractiveCaptchaSolution(dappAccount, challenge, timeout, env, ip, userAccessRulesStorage, email, spamEmailDomainCheckingEnabled = false, spamFilter, trafficFilter, storeMetadata = false, clientSessionId) {
+		const notVerifiedResponse = { verified: false };
+		const logger = this.logger.with({
+			challenge,
+			dappAccount
+		});
+		const challengeRecord = await this.getRecordByChallenge(challenge);
+		if (!challengeRecord) {
+			logger.debug(() => ({ msg: `No record of this challenge: ${challenge}` }));
+			return notVerifiedResponse;
+		}
+		notVerifiedResponse.sessionId = challengeRecord.sessionId;
+		if (challengeRecord.result.status !== CaptchaStatus.approved) throw new ProsopoApiError("CAPTCHA.INVALID_SOLUTION", { context: {
+			code: 400,
+			failedFuncName: this.serverVerifyInteractiveCaptchaSolution.name,
+			challenge
+		} });
+		if (challengeRecord.serverChecked) return notVerifiedResponse;
+		const challengeDappAccount = challengeRecord.dappAccount;
+		if (dappAccount !== challengeDappAccount) throw new ProsopoEnvError("CAPTCHA.DAPP_USER_SOLUTION_NOT_FOUND", { context: {
+			failedFuncName: this.serverVerifyInteractiveCaptchaSolution.name,
+			dappAccount,
+			challengeDappAccount
+		} });
+		if (!await this.markRecordChecked(challengeRecord.challenge)) return notVerifiedResponse;
+		const submittedAt = challengeRecord.submittedAtTimestamp;
+		if ((submittedAt instanceof Date ? Date.now() - submittedAt.getTime() : Number.POSITIVE_INFINITY) > timeout) {
+			await this.disapproveVerification(challengeRecord, ResultReason.TIMESTAMP_TOO_OLD);
+			return notVerifiedResponse;
+		}
+		if (isClientSessionMismatch(clientSessionId, challengeRecord.clientMetaData?.clientSessionId)) {
+			logger.info(() => ({
+				msg: `Client session mismatch in server ${this.logLabel} verification`,
+				data: { hasRecordedClientSessionId: Boolean(challengeRecord.clientMetaData?.clientSessionId) }
+			}));
+			await this.disapproveVerification(challengeRecord, ResultReason.CLIENT_SESSION_MISMATCH);
+			return notVerifiedResponse;
+		}
+		if (userAccessRulesStorage) try {
+			const blockPolicy = await this.checkForHardBlock(userAccessRulesStorage, challengeRecord, challengeRecord.userAccount, challengeRecord.headers, challengeRecord.coords, challengeRecord.ipInfo?.isValid ? challengeRecord.ipInfo.countryCode : void 0, challengeRecord.ipInfo?.isValid ? challengeRecord.ipInfo.asnNumber : void 0);
+			if (blockPolicy) {
+				logger.info(() => ({
+					msg: `User blocked by access policy in server ${this.logLabel} verification`,
+					data: {
+						userAccount: challengeRecord.userAccount,
+						policy: blockPolicy
+					}
+				}));
+				await this.disapproveVerification(challengeRecord, ResultReason.ACCESS_POLICY_BLOCK, { matchedRule: describeMatchedRule(blockPolicy) });
+				return notVerifiedResponse;
+			}
+		} catch (error) {
+			logger.warn(() => ({
+				msg: `Failed to check user access policies in server ${this.logLabel} verification`,
+				error
+			}));
+		}
+		if (email && spamEmailDomainCheckingEnabled) try {
+			if (await this.checkSpamEmail(email)) {
+				const emailDomain = email.split("@")[1] || "unknown";
+				logger.info(() => ({
+					msg: `Spam email domain detected in server ${this.logLabel} verification`,
+					data: { emailDomain }
+				}));
+				await this.disapproveVerification(challengeRecord, ResultReason.SPAM_EMAIL_DOMAIN, null);
+				return notVerifiedResponse;
+			}
+		} catch (error) {
+			logger.warn(() => ({
+				msg: `Failed to check spam email domain in server ${this.logLabel} verification`,
+				error
+			}));
+		}
+		const maxEmailSubmissionCount = spamFilter?.enabled && spamFilter.emailRules?.enabled ? spamFilter.emailRules.maxEmailSubmissionCount : void 0;
+		let emailNormalised;
+		if (maxEmailSubmissionCount !== void 0 && email && storeMetadata) {
+			emailNormalised = normaliseEmailForMatching(email);
+			if (emailNormalised) try {
+				const priorCount = await this.db.countCommitmentsByNormalisedEmail(dappAccount, emailNormalised);
+				if (priorCount >= maxEmailSubmissionCount) {
+					logger.info(() => ({
+						msg: `Email submission count exceeded in server ${this.logLabel} verification`,
+						data: {
+							priorCount,
+							maxEmailSubmissionCount
+						}
+					}));
+					await this.disapproveVerification(challengeRecord, ResultReason.SPAM_EMAIL_COUNT_EXCEEDED, null);
+					return notVerifiedResponse;
+				}
+			} catch (error) {
+				logger.warn(() => ({
+					msg: `Failed to check email submission count in server ${this.logLabel} verification`,
+					error
+				}));
+			}
+		}
+		const sessionRecord = challengeRecord.sessionId ? await this.getSessionRecordWithOriginFallback(challengeRecord.sessionId) : void 0;
+		const enrichedDnsEvent = await enrichDnsEvent(sessionRecord?.dnsEvent, env.ipInfoService, ip ?? challengeRecord.ipInfo?.ip);
+		{
+			const check = await this.resolveTrafficFilterCheck(env, challengeRecord.ipInfo, trafficFilter, ip, enrichedDnsEvent);
+			if (check.isBlocked) {
+				logger.info(() => ({
+					msg: `Traffic filter rejected request in ${this.logLabel} verification`,
+					data: {
+						ip,
+						reason: check.reason,
+						dnsPeerIp: enrichedDnsEvent?.peerIp,
+						dnsResolverIp: enrichedDnsEvent?.resolverIp,
+						dnsPeerAsn: getIpInfoAsn(enrichedDnsEvent?.peerIpInfo),
+						dnsResolverAsn: getIpInfoAsn(enrichedDnsEvent?.resolverIpInfo),
+						dnsPathValid: enrichedDnsEvent?.pathValid
+					}
+				}));
+				await this.disapproveVerification(challengeRecord, check.reason);
+				return notVerifiedResponse;
+			}
+		}
+		if (storeMetadata && email) await this.updateRecord(challengeRecord.challenge, { metadata: {
+			email,
+			emailNormalised: emailNormalised ?? normaliseEmailForMatching(email)
+		} });
+		if (ip) {
+			const challengeIpAddress = getIpAddressFromComposite(challengeRecord.ipAddress);
+			const ipValidationRules = (await this.db.getClientRecord(dappAccount))?.settings?.ipValidationRules;
+			await this.updateRecord(challengeRecord.challenge, { providedIp: getCompositeIpAddress(ip) });
+			if (ipValidationRules?.enabled === true) {
+				const ipValidation = await deepValidateIpAddress(ip, challengeIpAddress, logger, env.ipInfoService, ipValidationRules, enrichedDnsEvent?.peerIp);
+				if (!ipValidation.isValid) {
+					logger.error(() => ({
+						msg: `IP validation failed for ${this.logLabel} captcha`,
+						data: {
+							ip,
+							challengeIp: challengeIpAddress.address,
+							error: ipValidation.errorMessage,
+							distanceKm: ipValidation.distanceKm
+						}
+					}));
+					await this.disapproveVerification(challengeRecord, ResultReason.FAILED_IP_VALIDATION);
+					return notVerifiedResponse;
+				}
+			}
+		}
+		let score;
+		if (sessionRecord) {
+			const dnsAsymmetry = computeDnsAsymmetry(enrichedDnsEvent, challengeRecord.ipInfo, trafficFilter);
+			if (dnsAsymmetry > 0) sessionRecord.scoreComponents = {
+				...sessionRecord.scoreComponents,
+				dnsAsymmetry
+			};
+			score = computeFrictionlessScore(sessionRecord?.scoreComponents);
+			logger.info(() => ({ data: {
+				scoreComponents: { ...sessionRecord?.scoreComponents || {} },
+				score,
+				dnsPeerAsn: getIpInfoAsn(enrichedDnsEvent?.peerIpInfo),
+				dnsResolverAsn: getIpInfoAsn(enrichedDnsEvent?.resolverIpInfo)
+			} }));
+		}
+		try {
+			const decisionInput = {
+				userAccount: challengeRecord.userAccount,
+				dappAccount: challengeRecord.dappAccount,
+				captchaResult: "passed",
+				headers: challengeRecord.headers,
+				captchaType: this.captchaType,
+				behavioralDataPacked: challengeRecord.behavioralDataPacked,
+				deviceCapability: challengeRecord.deviceCapability,
+				countryCode: challengeRecord.ipInfo?.isValid ? challengeRecord.ipInfo.countryCode : void 0,
+				ipInfo: challengeRecord.ipInfo,
+				dnsEvent: enrichedDnsEvent,
+				score,
+				threshold: sessionRecord?.threshold,
+				scoreComponents: sessionRecord?.scoreComponents,
+				decryptedHeadHash: sessionRecord?.decryptedHeadHash,
+				userSitekeyIpHash: sessionRecord?.userSitekeyIpHash,
+				simdReadings: sessionRecord?.simdReadings,
+				d: sessionRecord?.d,
+				frictionlessReason: sessionRecord?.reason,
+				ruleType: sessionRecord?.ruleType,
+				webView: sessionRecord?.webView,
+				iFrame: sessionRecord?.iFrame,
+				currentUrl: sessionRecord?.currentUrl,
+				iframeUrl: sessionRecord?.iframeUrl,
+				coords: challengeRecord.coords,
+				...this.decisionMachineEventFields(challengeRecord),
+				...rawTlsSignalsFromRecord(sessionRecord),
+				trafficPolicies: deriveTrafficPolicies(trafficFilter)
+			};
+			const decision = await this.decisionMachineRunner.decide(decisionInput, logger);
+			if (decision.decision === DecisionMachineDecision.Deny) {
+				logger.info(() => ({
+					msg: `Decision machine denied ${this.logLabel} captcha in server verification`,
+					data: {
+						userAccount: challengeRecord.userAccount,
+						reason: decision.reason,
+						score: decision.score,
+						tags: decision.tags
+					}
+				}));
+				await this.disapproveVerification(challengeRecord, decision.reason || ResultReason.CAPTCHA_DECISION_MACHINE_DENIED);
+				return notVerifiedResponse;
+			}
+			logger.debug(() => ({
+				msg: `Decision machine allowed ${this.logLabel} captcha`,
+				data: {
+					reason: decision.reason,
+					score: decision.score,
+					tags: decision.tags
+				}
+			}));
+		} catch (error) {
+			logger.error(() => ({
+				msg: `Failed to run decision machine in server ${this.logLabel} verification`,
+				err: error
+			}));
+		}
+		if (challengeRecord.sessionId) await this.updateSessionRecordWithCache(challengeRecord.sessionId, {
+			serverChecked: true,
+			result: { status: CaptchaStatus.approved }
+		});
+		return {
+			verified: true,
+			...score ? { score } : {},
+			...challengeRecord.sessionId && { sessionId: challengeRecord.sessionId }
+		};
+	}
+	/**
+	* Records a server-verification rejection on the captcha record and, unless
+	* `session` is null, on the linked session.
+	*/
+	async disapproveVerification(challengeRecord, reason, session = {}) {
+		const result = {
+			status: CaptchaStatus.disapproved,
+			reason
+		};
+		const isBlocked = isBlockingCaptchaResult(this.captchaType, result);
+		await this.updateRecord(challengeRecord.challenge, {
+			result,
+			...isBlocked && { blocked: true }
+		});
+		if (session && challengeRecord.sessionId) await this.updateSessionRecordWithCache(challengeRecord.sessionId, {
+			serverChecked: true,
+			result,
+			...isBlocked && { blocked: true },
+			...session
+		});
+	}
+};
+//#endregion
+export { InteractiveCaptchaManager };

package/dist/tasks/interactiveCaptcha/interactiveCaptchaManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactiveCaptchaManager.js","sourceRoot":"","sources":["../../../src/tasks/interactiveCaptcha/interactiveCaptchaManager.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEnE,OAAO,EACN,SAAS,EAGT,aAAa,EAGb,uBAAuB,EAOvB,aAAa,EAGb,YAAY,EAEZ,iBAAiB,EACjB,uBAAuB,GACvB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAEN,mBAAmB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,gBAAgB,EAChB,EAAE,EACF,WAAW,EACX,aAAa,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EACN,qBAAqB,EACrB,yBAAyB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAEN,wBAAwB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,uBAAuB,EACvB,sBAAsB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EACN,mBAAmB,EACnB,cAAc,EACd,YAAY,GACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AA8C9E,MAAM,OAAgB,yBAEpB,SAAQ,cAAc;IAKvB,YACC,EAAqB,EACrB,IAAiB,EACjB,MAA2B,EAC3B,MAAe,EACf,aAAoC;QAEpC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,IAAI,CAAC;IAC5C,CAAC;IAwCS,aAAa,CACtB,WAAmB,EACnB,WAAmB;QAEnB,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,GAAmB,GAAG,oBAAoB,MAAM,WAAW,MAAM,WAAW,MAAM,KAAK,EAAE,CAAC;QACzG,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3E,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;IAC/D,CAAC;IAMS,KAAK,CAAC,gCAAgC,CAC/C,UAA0C;QAE1C,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,cAAc,EAAE,YAAY,EAAE,GACxE,UAAU,CAAC;QAEZ,iBAAiB,CAChB,SAAS,EACT,UAAU,CAAC,0BAA0B,EACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EACjB,SAAS,CAAC,SAAS,CACnB,CAAC;QAEF,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAE1C,iBAAiB,CAChB,SAAS,CAAC,QAAQ,EAAE,EACpB,sBAAsB,EACtB,WAAW,EACX,SAAS,CAAC,SAAS,CACnB,CAAC;QAEF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAEnE,IAAI,CAAC,eAAe,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,gCAAgC,SAAS,EAAE;aAChD,CAAC,CAAC,CAAC;YACJ,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAI3E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,GAAG,EAAE,gCAAgC,SAAS,EAAE;aAChD,CAAC,CAAC,CAAC;YACJ,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf;gBACC,MAAM,EAAE,aAAa,CAAC,WAAW;gBACjC,MAAM,EAAE,YAAY,CAAC,oBAAoB;aACzC,EACD,sBAAsB,EACtB,SAAS,CACT,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf;gBACC,MAAM,EAAE,aAAa,CAAC,WAAW;gBACjC,MAAM,EAAE,YAAY,CAAC,yBAAyB;aAC9C,EACD,sBAAsB,EACtB,MAAM,CACN,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACtD,MAAM,MAAM,GAAkB,OAAO;YACpC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;YACpC,CAAC,CAAC;gBACA,MAAM,EAAE,aAAa,CAAC,WAAW;gBACjC,MAAM,EAAE,YAAY,CAAC,wBAAwB;aAC7C,CAAC;QAIJ,IAAI,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,aAAa,CAAC,aAAa,CAC/B,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,EACrB,wBAAwB,CACvB,QAAQ,EACR,IAAI,CAAC,WAAW,EAChB,UAAU,CAAC,SAAS,CAAC,OAAO,EAC5B,WAAW,CACX,CACD,CAAC;QACH,CAAC;QAID,MAAM,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAEtC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC1D,eAAe,CAAC,SAAS,EACzB,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,CACnD,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC;gBACJ,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC;gBAElD,IAAI,aAAa,EAAE,CAAC;oBACnB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;wBACxB,GAAG,EAAE,+BAA+B;wBACpC,IAAI,EAAE;4BACL,WAAW;4BACX,WAAW,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;4BAClC,SAAS;4BACT,gBAAgB,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;4BACvD,gBAAgB,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;4BACvD,gBAAgB,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;4BACvD,iBAAiB,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;4BACxD,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;4BAChD,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;yBAC5C;qBACD,CAAC,CAAC,CAAC;oBAEJ,MAAM,UAAU,GAAyB;wBACxC,EAAE,EAAE,aAAa,CAAC,UAAU,IAAI,EAAE;wBAClC,EAAE,EAAE,aAAa,CAAC,UAAU,IAAI,EAAE;wBAClC,EAAE,EAAE,aAAa,CAAC,UAAU,IAAI,EAAE;wBAClC,EAAE,EAAE,aAAa,CAAC,UAAU,IAAI,EAAE;wBAClC,CAAC,EAAE,aAAa,CAAC,gBAAgB;qBACjC,CAAC;oBAEF,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE;wBAClC,oBAAoB,EAAE,UAAU;wBAChC,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;qBAChD,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACzB,GAAG,EAAE,mCAAmC;oBACxC,GAAG,EAAE,KAAK;iBACV,CAAC,CAAC,CAAC;YAEL,CAAC;QACF,CAAC;QAED,MAAM,oBAAoB,GAAG,sBAAsB,CAClD,UAAU,CAAC,cAAc,CACzB,CAAC;QACF,IAAI,oBAAoB,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE;gBAClC,cAAc,EAAE,oBAAoB;aACpC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,MAAM,EACN,sBAAsB,EACtB,MAAM,EACN,oBAAoB,CACpB,CAAC;QAEF,IAAI,eAAe,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;YACvD,MAAM,IAAI,CAAC,0CAA0C,CACpD,eAAe,CAAC,SAAS,EACzB,eAAe,CAAC,IAAI,EACpB,iBAAiB,CAAC,MAAM,CACxB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAGO,gBAAgB,CAAC,IAAwB;QAIhD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACX,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,MAAM,GAAyB;gBACpC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAqB,CAAC;aAC1D,CAAC;YACF,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvB,GAAG,EAAE,yCAAyC;gBAC9C,KAAK;gBACL,IAAI;aACJ,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,sBAAsB,CACnC,eAAwB,EACxB,MAAqB,EACrB,aAAqB,EACrB,MAAwC,EACxC,cAA+B;QAE/B,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,CAAC,SAAS,EACzB,MAAM,EACN,aAAa,EACb,MAAM,CACN,CAAC;QACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,4BAA4B,CAAC,eAAe,CAAC,SAAS,EAAE;gBAClE,aAAa,EAAE,IAAI;gBACnB,MAAM;gBACN,GAAG,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI;oBACxD,OAAO,EAAE,IAAI;iBACb,CAAC;gBAGF,GAAG,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,CAAC;aACzC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAsBD,KAAK,CAAC,sCAAsC,CAC3C,WAAmB,EACnB,SAAiB,EACjB,OAAe,EACf,GAAwB,EACxB,EAAW,EACX,sBAA2C,EAC3C,KAAc,EACd,8BAA8B,GAAG,KAAK,EACtC,UAA6B,EAC7B,aAA8B,EAC9B,aAAa,GAAG,KAAK,EACrB,eAAwB;QAIxB,MAAM,mBAAmB,GAGrB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAIxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAE5D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAEnE,IAAI,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,gCAAgC,SAAS,EAAE;aAChD,CAAC,CAAC,CAAC;YAEJ,OAAO,mBAAmB,CAAC;QAC5B,CAAC;QAED,mBAAmB,CAAC,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;QAE1D,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC9D,MAAM,IAAI,eAAe,CAAC,0BAA0B,EAAE;gBACrD,OAAO,EAAE;oBACR,IAAI,EAAE,GAAG;oBACT,cAAc,EAAE,IAAI,CAAC,sCAAsC,CAAC,IAAI;oBAChE,SAAS;iBACT;aACD,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,CAAC,aAAa;YAAE,OAAO,mBAAmB,CAAC;QAE9D,MAAM,oBAAoB,GAAG,eAAe,CAAC,WAAW,CAAC;QAEzD,IAAI,WAAW,KAAK,oBAAoB,EAAE,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE;gBACjE,OAAO,EAAE;oBACR,cAAc,EAAE,IAAI,CAAC,sCAAsC,CAAC,IAAI;oBAChE,WAAW;oBACX,oBAAoB;iBACpB;aACD,CAAC,CAAC;QACJ,CAAC;QAQD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO;YAAE,OAAO,mBAAmB,CAAC;QAGzC,MAAM,WAAW,GAAG,eAAe,CAAC,oBAAoB,CAAC;QACzD,MAAM,gBAAgB,GACrB,WAAW,YAAY,IAAI;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE;YACpC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC7B,IAAI,gBAAgB,GAAG,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,YAAY,CAAC,iBAAiB,CAC9B,CAAC;YACF,OAAO,mBAAmB,CAAC;QAC5B,CAAC;QAMD,IACC,uBAAuB,CACtB,eAAe,EACf,eAAe,CAAC,cAAc,EAAE,eAAe,CAC/C,EACA,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAClB,GAAG,EAAE,qCAAqC,IAAI,CAAC,QAAQ,eAAe;gBACtE,IAAI,EAAE;oBACL,0BAA0B,EAAE,OAAO,CAClC,eAAe,CAAC,cAAc,EAAE,eAAe,CAC/C;iBACD;aACD,CAAC,CAAC,CAAC;YACJ,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,YAAY,CAAC,uBAAuB,CACpC,CAAC;YACF,OAAO,mBAAmB,CAAC;QAC5B,CAAC;QAGD,IAAI,sBAAsB,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC/C,sBAAsB,EACtB,eAAe,EACf,eAAe,CAAC,WAAW,EAC3B,eAAe,CAAC,OAAO,EACvB,eAAe,CAAC,MAAM,EACtB,eAAe,CAAC,MAAM,EAAE,OAAO;oBAC9B,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW;oBACpC,CAAC,CAAC,SAAS,EACZ,eAAe,CAAC,MAAM,EAAE,OAAO;oBAC9B,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS;oBAClC,CAAC,CAAC,SAAS,CACZ,CAAC;gBAEF,IAAI,WAAW,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;wBAClB,GAAG,EAAE,2CAA2C,IAAI,CAAC,QAAQ,eAAe;wBAC5E,IAAI,EAAE;4BACL,WAAW,EAAE,eAAe,CAAC,WAAW;4BACxC,MAAM,EAAE,WAAW;yBACnB;qBACD,CAAC,CAAC,CAAC;oBACJ,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,YAAY,CAAC,mBAAmB,EAChC;wBAKC,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC;qBAC7C,CACD,CAAC;oBACF,OAAO,mBAAmB,CAAC;gBAC5B,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClB,GAAG,EAAE,kDAAkD,IAAI,CAAC,QAAQ,eAAe;oBACnF,KAAK;iBACL,CAAC,CAAC,CAAC;YACL,CAAC;QACF,CAAC;QAGD,IAAI,KAAK,IAAI,8BAA8B,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAChD,IAAI,MAAM,EAAE,CAAC;oBACZ,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;oBACrD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;wBAClB,GAAG,EAAE,wCAAwC,IAAI,CAAC,QAAQ,eAAe;wBACzE,IAAI,EAAE,EAAE,WAAW,EAAE;qBACrB,CAAC,CAAC,CAAC;oBACJ,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,YAAY,CAAC,iBAAiB,EAC9B,IAAI,CACJ,CAAC;oBACF,OAAO,mBAAmB,CAAC;gBAC5B,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClB,GAAG,EAAE,+CAA+C,IAAI,CAAC,QAAQ,eAAe;oBAChF,KAAK;iBACL,CAAC,CAAC,CAAC;YACL,CAAC;QACF,CAAC;QAKD,MAAM,uBAAuB,GAC5B,UAAU,EAAE,OAAO,IAAI,UAAU,CAAC,UAAU,EAAE,OAAO;YACpD,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,uBAAuB;YAC/C,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,eAAmC,CAAC;QACxC,IAAI,uBAAuB,KAAK,SAAS,IAAI,KAAK,IAAI,aAAa,EAAE,CAAC;YACrE,eAAe,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,eAAe,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACJ,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,iCAAiC,CACjE,WAAW,EACX,eAAe,CACf,CAAC;oBACF,IAAI,UAAU,IAAI,uBAAuB,EAAE,CAAC;wBAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;4BAClB,GAAG,EAAE,6CAA6C,IAAI,CAAC,QAAQ,eAAe;4BAC9E,IAAI,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE;yBAC7C,CAAC,CAAC,CAAC;wBACJ,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,YAAY,CAAC,yBAAyB,EACtC,IAAI,CACJ,CAAC;wBACF,OAAO,mBAAmB,CAAC;oBAC5B,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;wBAClB,GAAG,EAAE,oDAAoD,IAAI,CAAC,QAAQ,eAAe;wBACrF,KAAK;qBACL,CAAC,CAAC,CAAC;gBACL,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAM,aAAa,GAAG,eAAe,CAAC,SAAS;YAC9C,CAAC,CAAC,MAAM,IAAI,CAAC,kCAAkC,CAAC,eAAe,CAAC,SAAS,CAAC;YAC1E,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAC5C,aAAa,EAAE,QAAQ,EACvB,GAAG,CAAC,aAAa,EACjB,EAAE,IAAI,eAAe,CAAC,MAAM,EAAE,EAAE,CAChC,CAAC;QAEF,CAAC;YACA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACjD,GAAG,EACH,eAAe,CAAC,MAAM,EACtB,aAAa,EACb,EAAE,EACF,gBAAgB,CAChB,CAAC;YACF,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClB,GAAG,EAAE,sCAAsC,IAAI,CAAC,QAAQ,eAAe;oBACvE,IAAI,EAAE;wBACL,EAAE;wBACF,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,SAAS,EAAE,gBAAgB,EAAE,MAAM;wBACnC,aAAa,EAAE,gBAAgB,EAAE,UAAU;wBAC3C,UAAU,EAAE,YAAY,CAAC,gBAAgB,EAAE,UAAU,CAAC;wBACtD,cAAc,EAAE,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC;wBAC9D,YAAY,EAAE,gBAAgB,EAAE,SAAS;qBACzC;iBACD,CAAC,CAAC,CAAC;gBACJ,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjE,OAAO,mBAAmB,CAAC;YAC5B,CAAC;QACF,CAAC;QAMD,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,SAAS,EAAE;gBAClD,QAAQ,EAAE;oBACT,KAAK;oBACL,eAAe,EAAE,eAAe,IAAI,yBAAyB,CAAC,KAAK,CAAC;iBACpE;aACD,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,EAAE,EAAE,CAAC;YACR,MAAM,kBAAkB,GAAG,yBAAyB,CACnD,eAAe,CAAC,SAAS,CACzB,CAAC;YAGF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAChE,MAAM,iBAAiB,GAAG,YAAY,EAAE,QAAQ,EAAE,iBAAiB,CAAC;YAEpE,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,SAAS,EAAE;gBAClD,UAAU,EAAE,qBAAqB,CAAC,EAAE,CAAC;aACrC,CAAC,CAAC;YAEH,IAAI,iBAAiB,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;gBACzC,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAC/C,EAAE,EACF,kBAAkB,EAClB,MAAM,EACN,GAAG,CAAC,aAAa,EACjB,iBAAiB,EACjB,gBAAgB,EAAE,MAAM,CACxB,CAAC;gBAEF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;wBACnB,GAAG,EAAE,4BAA4B,IAAI,CAAC,QAAQ,UAAU;wBACxD,IAAI,EAAE;4BACL,EAAE;4BACF,WAAW,EAAE,kBAAkB,CAAC,OAAO;4BACvC,KAAK,EAAE,YAAY,CAAC,YAAY;4BAChC,UAAU,EAAE,YAAY,CAAC,UAAU;yBACnC;qBACD,CAAC,CAAC,CAAC;oBACJ,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,YAAY,CAAC,oBAAoB,CACjC,CAAC;oBACF,OAAO,mBAAmB,CAAC;gBAC5B,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,KAAyB,CAAC;QAC9B,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,mBAAmB,CACvC,gBAAgB,EAChB,eAAe,CAAC,MAAM,EACtB,aAAa,CACb,CAAC;YACF,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACtB,aAAa,CAAC,eAAe,GAAG;oBAC/B,GAAG,aAAa,CAAC,eAAe;oBAChC,YAAY;iBACZ,CAAC;YACH,CAAC;YACD,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAClB,IAAI,EAAE;oBACL,eAAe,EAAE,EAAE,GAAG,CAAC,aAAa,EAAE,eAAe,IAAI,EAAE,CAAC,EAAE;oBAC9D,KAAK;oBACL,UAAU,EAAE,YAAY,CAAC,gBAAgB,EAAE,UAAU,CAAC;oBACtD,cAAc,EAAE,YAAY,CAAC,gBAAgB,EAAE,cAAc,CAAC;iBAC9D;aACD,CAAC,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,CAAC;YACJ,MAAM,aAAa,GAAyB;gBAC3C,WAAW,EAAE,eAAe,CAAC,WAAW;gBACxC,WAAW,EAAE,eAAe,CAAC,WAAW;gBACxC,aAAa,EAAE,QAAQ;gBACvB,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;gBAC1D,gBAAgB,EAAE,eAAe,CAAC,gBAAgB;gBAClD,WAAW,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO;oBAC3C,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW;oBACpC,CAAC,CAAC,SAAS;gBACZ,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK;gBACL,SAAS,EAAE,aAAa,EAAE,SAAS;gBACnC,eAAe,EAAE,aAAa,EAAE,eAAe;gBAC/C,iBAAiB,EAAE,aAAa,EAAE,iBAAiB;gBACnD,iBAAiB,EAAE,aAAa,EAAE,iBAAiB;gBACnD,YAAY,EAAE,aAAa,EAAE,YAAY;gBAEzC,CAAC,EAAE,aAAa,EAAE,CAAC;gBACnB,kBAAkB,EAAE,aAAa,EAAE,MAAM;gBACzC,QAAQ,EAAE,aAAa,EAAE,QAAQ;gBACjC,OAAO,EAAE,aAAa,EAAE,OAAO;gBAC/B,MAAM,EAAE,aAAa,EAAE,MAAM;gBAC7B,UAAU,EAAE,aAAa,EAAE,UAAU;gBACrC,SAAS,EAAE,aAAa,EAAE,SAAS;gBACnC,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,GAAG,IAAI,CAAC,0BAA0B,CAAC,eAAe,CAAC;gBAEnD,GAAG,uBAAuB,CAAC,aAAa,CAAC;gBAMzC,eAAe,EAAE,qBAAqB,CAAC,aAAa,CAAC;aACrD,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CACvD,aAAa,EACb,MAAM,CACN,CAAC;YAEF,IAAI,QAAQ,CAAC,QAAQ,KAAK,uBAAuB,CAAC,IAAI,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAClB,GAAG,EAAE,2BAA2B,IAAI,CAAC,QAAQ,iCAAiC;oBAC9E,IAAI,EAAE;wBACL,WAAW,EAAE,eAAe,CAAC,WAAW;wBACxC,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;qBACnB;iBACD,CAAC,CAAC,CAAC;gBAKJ,MAAM,IAAI,CAAC,sBAAsB,CAChC,eAAe,EACf,CAAC,QAAQ,CAAC,MAAM;oBACf,YAAY,CAAC,+BAA+B,CAAiB,CAC9D,CAAC;gBACF,OAAO,mBAAmB,CAAC;YAC5B,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,4BAA4B,IAAI,CAAC,QAAQ,UAAU;gBACxD,IAAI,EAAE;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACnB;aACD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnB,GAAG,EAAE,4CAA4C,IAAI,CAAC,QAAQ,eAAe;gBAC7E,GAAG,EAAE,KAAK;aACV,CAAC,CAAC,CAAC;QAEL,CAAC;QAGD,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,4BAA4B,CAAC,eAAe,CAAC,SAAS,EAAE;gBAClE,aAAa,EAAE,IAAI;gBACnB,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE;aAC1C,CAAC,CAAC;QACJ,CAAC;QAED,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI;gBAChC,SAAS,EAAE,eAAe,CAAC,SAAS;aACpC,CAAC;SACF,CAAC;IACH,CAAC;IAMO,KAAK,CAAC,sBAAsB,CACnC,eAAwB,EACxB,MAAoB,EACpB,UAA+C,EAAE;QAEjD,MAAM,MAAM,GAAkB,EAAE,MAAM,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAC5E,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,SAAS,EAAE;YAClD,MAAM;YACN,GAAG,CAAC,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,4BAA4B,CAAC,eAAe,CAAC,SAAS,EAAE;gBAClE,aAAa,EAAE,IAAI;gBACnB,MAAM;gBACN,GAAG,CAAC,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACnC,GAAG,OAAO;aACV,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD"}

package/dist/tasks/powCaptcha/powTasks.js

@@ -1,21 +1,21 @@
 import { buildAllWindowIncrements } from "../../util/usageCounters.js";
-import { DecisionMachineRunner } from "../decisionMachine/decisionMachineRunner.js";
 import { rawTlsSignalsFromRecord } from "../../api/rawTlsSignalsMiddleware.js";
-import { isClientSessionMismatch, toStoredClientMetaData } from "../../utils/clientMetaData.js";
 import { getCompositeIpAddress, getIpAddressFromComposite, isSameIpOrigin } from "../../compositeIpAddress.js";
-import { computeDnsAsymmetry, enrichDnsEvent, getIpInfoAsn } from "../dnsEvent/enrichDnsEvent.js";
-import { CaptchaManager } from "../captchaManager.js";
-import { applyRouter } from "../frictionless/routingMachine.js";
 import { deepValidateIpAddress } from "../../util.js";
+import { isClientSessionMismatch, toStoredClientMetaData } from "../../utils/clientMetaData.js";
 import { deriveTrafficPolicies } from "../../utils/devicePlatform.js";
+import { computeDnsAsymmetry, enrichDnsEvent, getIpInfoAsn } from "../dnsEvent/enrichDnsEvent.js";
+import { CaptchaManager } from "../captchaManager.js";
+import { DecisionMachineRunner } from "../decisionMachine/decisionMachineRunner.js";
 import { computeFrictionlessScore } from "../frictionless/frictionlessTasksUtils.js";
-import { evaluateEmailSpamRules, normaliseEmailForMatching } from "../spam/evaluateEmailSpamRules.js";
 import { checkPowSignature, isCoordsAllZero, validateSolution } from "./powTasksUtils.js";
+import { evaluateEmailSpamRules, normaliseEmailForMatching } from "../spam/evaluateEmailSpamRules.js";
+import { applyRouter } from "../frictionless/routingMachine.js";
 import { ProsopoApiError, ProsopoEnvError } from "@prosopo/common";
 import { ApiParams, CaptchaStatus, CaptchaType, DecisionMachineDecision, FrictionlessReason, POW_SEPARATOR, ResultReason, SimdReadingsStage, isBlockingCaptchaResult } from "@prosopo/types";
-import { assertCoordsSafe, at, extractData, verifyRecency } from "@prosopo/util";
-import { describeMatchedRule } from "@prosopo/user-access-policy";
 import { stringToHex, u8aToHex } from "@polkadot/util";
+import { describeMatchedRule } from "@prosopo/user-access-policy";
+import { assertCoordsSafe, at, extractData, verifyRecency } from "@prosopo/util";
 //#region src/tasks/powCaptcha/powTasks.ts
 var DEFAULT_POW_DIFFICULTY = 4;
 var PowCaptchaManager = class extends CaptchaManager {

package/dist/tasks/powCaptcha/powTasksUtils.js

@@ -1,7 +1,7 @@
 import { ProsopoApiError } from "@prosopo/common";
+import { stringToHex } from "@polkadot/util";
 import { hashMeetsDifficulty } from "@prosopo/util";
 import { signatureVerify } from "@prosopo/util-crypto";
-import { stringToHex } from "@polkadot/util";
 import { sha256 } from "@noble/hashes/sha2.js";
 //#region src/tasks/powCaptcha/powTasksUtils.ts
 var validateSolution = (nonce, challenge, difficulty) => hashMeetsDifficulty(sha256(new TextEncoder().encode(nonce + challenge)), difficulty);

package/dist/tasks/puzzleCaptcha/puzzleTasks.d.ts

@@ -1,26 +1,24 @@
-import type { Logger } from "@prosopo/logger";
-import type { KeyringPair, ProsopoConfigOutput } from "@prosopo/types";
-import { type ClientMetaData, type IPAddress, type ISpamFilterRules, type ITrafficFilter, type PoWChallengeId, type PuzzleEvent, type RequestHeaders } from "@prosopo/types";
-import type { IProviderDatabase } from "@prosopo/types-database";
+import { type CaptchaResult, CaptchaType, type ClientMetaData, type DecisionMachineInput, type IPAddress, type ISpamFilterRules, type ITrafficFilter, type PoWChallengeId, type PuzzleEvent, type RequestHeaders } from "@prosopo/types";
+import type { PuzzleCaptchaRecord } from "@prosopo/types-database";
 import type { ProviderEnvironment } from "@prosopo/types-env";
-import { type AccessRulesStorage } from "@prosopo/user-access-policy";
-import { type UsageCounters } from "../../util/usageCounters.js";
-import { CaptchaManager } from "../captchaManager.js";
-interface PuzzleCaptchaChallenge {
-    challenge: PoWChallengeId;
+import type { AccessRulesStorage } from "@prosopo/user-access-policy";
+import { InteractiveCaptchaManager, type InteractiveCaptchaRecordUpdate, type MintedChallenge } from "../interactiveCaptcha/interactiveCaptchaManager.js";
+interface PuzzleCaptchaChallenge extends MintedChallenge {
     targetX: number;
     targetY: number;
     originX: number;
     originY: number;
     tolerance: number;
-    providerSignature: string;
-    requestedAtTimestamp: number;
 }
-export declare class PuzzleCaptchaManager extends CaptchaManager {
-    POW_SEPARATOR: string;
-    private decisionMachineRunner;
-    private readonly usageCounters;
-    constructor(db: IProviderDatabase, pair: KeyringPair, config: ProsopoConfigOutput, logger?: Logger, usageCounters?: UsageCounters | null);
+export declare class PuzzleCaptchaManager extends InteractiveCaptchaManager<PuzzleCaptchaRecord> {
+    protected readonly captchaType = CaptchaType.puzzle;
+    protected readonly logLabel = "puzzle";
+    protected getRecordByChallenge(challenge: string): Promise<PuzzleCaptchaRecord | null>;
+    protected updateRecord(challenge: PoWChallengeId, updates: InteractiveCaptchaRecordUpdate): Promise<void>;
+    protected updateSubmissionResult(challenge: PoWChallengeId, result: CaptchaResult, userSignature: string, coords: [number, number][][] | undefined): Promise<void>;
+    protected claimSubmission(record: PuzzleCaptchaRecord): Promise<boolean>;
+    protected markRecordChecked(challenge: PoWChallengeId): Promise<boolean>;
+    protected decisionMachineEventFields(record: PuzzleCaptchaRecord): Partial<DecisionMachineInput>;
     getPuzzleCaptchaChallenge(userAccount: string, dappAccount: string, origin: string, tolerance?: number): Promise<PuzzleCaptchaChallenge>;
     verifyPuzzleCaptchaSolution(challenge: PoWChallengeId, providerChallengeSignature: string, finalX: number, finalY: number, puzzleEvents: PuzzleEvent[], timeout: number, userTimestampSignature: string, ipAddress: IPAddress, headers: RequestHeaders, behavioralData?: string, salt?: string, simdReadings?: string, clientMetaData?: ClientMetaData): Promise<boolean>;
     serverVerifyPuzzleCaptchaSolution(dappAccount: string, challenge: string, timeout: number, env: ProviderEnvironment, ip?: string, userAccessRulesStorage?: AccessRulesStorage, email?: string, spamEmailDomainCheckingEnabled?: boolean, spamFilter?: ISpamFilterRules, trafficFilter?: ITrafficFilter, storeMetadata?: boolean, clientSessionId?: string): Promise<{

package/dist/tasks/puzzleCaptcha/puzzleTasks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"puzzleTasks.d.ts","sourceRoot":"","sources":["../../../src/tasks/puzzleCaptcha/puzzleTasks.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAMvE,OAAO,EAKN,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAEnB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EAKnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACN,KAAK,kBAAkB,EAEvB,MAAM,6BAA6B,CAAC;AAarC,OAAO,EACN,KAAK,aAAa,EAElB,MAAM,6BAA6B,CAAC;AAMrC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAYtD,UAAU,sBAAsB;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;CAC7B;AAED,qBAAa,oBAAqB,SAAQ,cAAc;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,qBAAqB,CAAwB;IACrD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;gBAGpD,EAAE,EAAE,iBAAiB,EACrB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,mBAAmB,EAC3B,MAAM,CAAC,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI;IAgB/B,yBAAyB,CAC9B,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC;IA6C5B,2BAA2B,CAChC,SAAS,EAAE,cAAc,EACzB,0BAA0B,EAAE,MAAM,EAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,WAAW,EAAE,EAC3B,OAAO,EAAE,MAAM,EACf,sBAAsB,EAAE,MAAM,EAC9B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,cAAc,EACvB,cAAc,CAAC,EAAE,MAAM,EACvB,IAAI,CAAC,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,cAAc,GAC7B,OAAO,CAAC,OAAO,CAAC;IAqRb,iCAAiC,CACtC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,mBAAmB,EACxB,EAAE,CAAC,EAAE,MAAM,EACX,sBAAsB,CAAC,EAAE,kBAAkB,EAC3C,KAAK,CAAC,EAAE,MAAM,EACd,8BAA8B,UAAQ,EACtC,UAAU,CAAC,EAAE,gBAAgB,EAC7B,aAAa,CAAC,EAAE,cAAc,EAC9B,aAAa,UAAQ,EACrB,eAAe,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAygBrE"}
+{"version":3,"file":"puzzleTasks.d.ts","sourceRoot":"","sources":["../../../src/tasks/puzzleCaptcha/puzzleTasks.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,aAAa,EAClB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EACN,yBAAyB,EACzB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,MAAM,oDAAoD,CAAC;AAG5D,UAAU,sBAAuB,SAAQ,eAAe;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,oBAAqB,SAAQ,yBAAyB,CAAC,mBAAmB,CAAC;IACvF,SAAS,CAAC,QAAQ,CAAC,WAAW,sBAAsB;IACpD,SAAS,CAAC,QAAQ,CAAC,QAAQ,YAAY;IAEvC,SAAS,CAAC,oBAAoB,CAC7B,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAItC,SAAS,CAAC,YAAY,CACrB,SAAS,EAAE,cAAc,EACzB,OAAO,EAAE,8BAA8B,GACrC,OAAO,CAAC,IAAI,CAAC;IAIhB,SAAS,CAAC,sBAAsB,CAC/B,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,SAAS,GACtC,OAAO,CAAC,IAAI,CAAC;cAWA,eAAe,CAC9B,MAAM,EAAE,mBAAmB,GACzB,OAAO,CAAC,OAAO,CAAC;IAInB,SAAS,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxE,SAAS,CAAC,0BAA0B,CACnC,MAAM,EAAE,mBAAmB,GACzB,OAAO,CAAC,oBAAoB,CAAC;IAY1B,yBAAyB,CAC9B,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC;IAsC5B,2BAA2B,CAChC,SAAS,EAAE,cAAc,EACzB,0BAA0B,EAAE,MAAM,EAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,WAAW,EAAE,EAC3B,OAAO,EAAE,MAAM,EACf,sBAAsB,EAAE,MAAM,EAC9B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,cAAc,EACvB,cAAc,CAAC,EAAE,MAAM,EACvB,IAAI,CAAC,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,cAAc,GAC7B,OAAO,CAAC,OAAO,CAAC;IAwBb,iCAAiC,CACtC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,mBAAmB,EACxB,EAAE,CAAC,EAAE,MAAM,EACX,sBAAsB,CAAC,EAAE,kBAAkB,EAC3C,KAAK,CAAC,EAAE,MAAM,EACd,8BAA8B,UAAQ,EACtC,UAAU,CAAC,EAAE,gBAAgB,EAC7B,aAAa,CAAC,EAAE,cAAc,EAC9B,aAAa,UAAQ,EACrB,eAAe,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAgBrE"}