@samanhappy/mcphub 0.10.2 → 0.10.4

package/dist/controllers/oauthDynamicRegistrationController.js

@@ -0,0 +1,479 @@
+import crypto from 'crypto';
+import { createOAuthClient, findOAuthClientById, updateOAuthClient, deleteOAuthClient, } from '../models/OAuth.js';
+import { loadSettings } from '../config/index.js';
+// Store registration access tokens (in production, use database)
+const registrationTokens = new Map();
+/**
+ * Generate registration access token
+ */
+const generateRegistrationToken = (clientId) => {
+    const token = crypto.randomBytes(32).toString('hex');
+    registrationTokens.set(token, {
+        clientId,
+        createdAt: new Date(),
+    });
+    return token;
+};
+/**
+ * Verify registration access token
+ */
+const verifyRegistrationToken = (token) => {
+    const data = registrationTokens.get(token);
+    if (!data) {
+        return null;
+    }
+    // Token expires after 30 days
+    const expiresAt = new Date(data.createdAt.getTime() + 30 * 24 * 60 * 60 * 1000);
+    if (new Date() > expiresAt) {
+        registrationTokens.delete(token);
+        return null;
+    }
+    return data.clientId;
+};
+/**
+ * POST /oauth/register
+ * RFC 7591 Dynamic Client Registration
+ * Public endpoint for registering new OAuth clients
+ */
+export const registerClient = (req, res) => {
+    try {
+        const settings = loadSettings();
+        const oauthConfig = settings.systemConfig?.oauthServer;
+        // Check if dynamic registration is enabled
+        if (!oauthConfig?.dynamicRegistration?.enabled) {
+            res.status(403).json({
+                error: 'invalid_request',
+                error_description: 'Dynamic client registration is not enabled',
+            });
+            return;
+        }
+        // Validate required fields
+        const { redirect_uris, client_name, grant_types, response_types, scope, token_endpoint_auth_method, application_type, contacts, logo_uri, client_uri, policy_uri, tos_uri, jwks_uri, jwks, } = req.body;
+        // redirect_uris is required
+        if (!redirect_uris || !Array.isArray(redirect_uris) || redirect_uris.length === 0) {
+            res.status(400).json({
+                error: 'invalid_redirect_uri',
+                error_description: 'redirect_uris is required and must be a non-empty array',
+            });
+            return;
+        }
+        // Validate redirect URIs
+        for (const uri of redirect_uris) {
+            try {
+                const url = new URL(uri);
+                // For security, only allow https (except localhost for development)
+                if (url.protocol !== 'https:' &&
+                    !url.hostname.match(/^(localhost|127\.0\.0\.1|\[::1\])$/)) {
+                    res.status(400).json({
+                        error: 'invalid_redirect_uri',
+                        error_description: `Redirect URI must use HTTPS: ${uri}`,
+                    });
+                    return;
+                }
+            }
+            catch (e) {
+                res.status(400).json({
+                    error: 'invalid_redirect_uri',
+                    error_description: `Invalid redirect URI: ${uri}`,
+                });
+                return;
+            }
+        }
+        // Generate client credentials
+        const clientId = crypto.randomBytes(16).toString('hex');
+        // Determine if client secret is needed based on token_endpoint_auth_method
+        const authMethod = token_endpoint_auth_method || 'client_secret_basic';
+        const needsSecret = authMethod !== 'none';
+        const clientSecret = needsSecret ? crypto.randomBytes(32).toString('hex') : undefined;
+        // Default grant types
+        const defaultGrantTypes = ['authorization_code', 'refresh_token'];
+        const clientGrantTypes = grant_types || defaultGrantTypes;
+        // Validate grant types
+        const allowedGrantTypes = oauthConfig.dynamicRegistration.allowedGrantTypes || [
+            'authorization_code',
+            'refresh_token',
+        ];
+        for (const grantType of clientGrantTypes) {
+            if (!allowedGrantTypes.includes(grantType)) {
+                res.status(400).json({
+                    error: 'invalid_client_metadata',
+                    error_description: `Grant type not allowed: ${grantType}`,
+                });
+                return;
+            }
+        }
+        // Validate scopes
+        const requestedScopes = scope ? scope.split(' ') : ['read', 'write'];
+        const allowedScopes = oauthConfig.allowedScopes || ['read', 'write'];
+        for (const requestedScope of requestedScopes) {
+            if (!allowedScopes.includes(requestedScope)) {
+                res.status(400).json({
+                    error: 'invalid_client_metadata',
+                    error_description: `Scope not allowed: ${requestedScope}`,
+                });
+                return;
+            }
+        }
+        // Generate registration access token
+        const registrationAccessToken = generateRegistrationToken(clientId);
+        const baseUrl = settings.systemConfig?.install?.baseUrl || `${req.protocol}://${req.get('host')}`;
+        const registrationClientUri = `${baseUrl}/oauth/register/${clientId}`;
+        // Create OAuth client
+        const client = {
+            clientId,
+            clientSecret,
+            name: client_name || 'Dynamically Registered Client',
+            redirectUris: redirect_uris,
+            grants: clientGrantTypes,
+            scopes: requestedScopes,
+            owner: 'dynamic-registration',
+            // Store additional metadata
+            metadata: {
+                application_type: application_type || 'web',
+                contacts,
+                logo_uri,
+                client_uri,
+                policy_uri,
+                tos_uri,
+                jwks_uri,
+                jwks,
+                token_endpoint_auth_method: authMethod,
+                response_types: response_types || ['code'],
+            },
+        };
+        const createdClient = createOAuthClient(client);
+        // Build response according to RFC 7591
+        const response = {
+            client_id: createdClient.clientId,
+            client_name: createdClient.name,
+            redirect_uris: createdClient.redirectUris,
+            grant_types: createdClient.grants,
+            response_types: client.metadata?.response_types || ['code'],
+            scope: (createdClient.scopes || []).join(' '),
+            token_endpoint_auth_method: authMethod,
+            registration_access_token: registrationAccessToken,
+            registration_client_uri: registrationClientUri,
+            client_id_issued_at: Math.floor(Date.now() / 1000),
+        };
+        // Include client secret if generated
+        if (clientSecret) {
+            response.client_secret = clientSecret;
+            response.client_secret_expires_at = 0; // 0 means it doesn't expire
+        }
+        // Include optional metadata
+        if (application_type)
+            response.application_type = application_type;
+        if (contacts)
+            response.contacts = contacts;
+        if (logo_uri)
+            response.logo_uri = logo_uri;
+        if (client_uri)
+            response.client_uri = client_uri;
+        if (policy_uri)
+            response.policy_uri = policy_uri;
+        if (tos_uri)
+            response.tos_uri = tos_uri;
+        if (jwks_uri)
+            response.jwks_uri = jwks_uri;
+        if (jwks)
+            response.jwks = jwks;
+        res.status(201).json(response);
+    }
+    catch (error) {
+        console.error('Dynamic client registration error:', error);
+        if (error instanceof Error && error.message.includes('already exists')) {
+            res.status(400).json({
+                error: 'invalid_client_metadata',
+                error_description: 'Client with this ID already exists',
+            });
+        }
+        else {
+            res.status(500).json({
+                error: 'server_error',
+                error_description: 'Failed to register client',
+            });
+        }
+    }
+};
+/**
+ * GET /oauth/register/:clientId
+ * RFC 7591 Client Configuration Endpoint
+ * Read client configuration
+ */
+export const getClientConfiguration = (req, res) => {
+    try {
+        const { clientId } = req.params;
+        const authHeader = req.headers.authorization;
+        if (!authHeader || !authHeader.startsWith('Bearer ')) {
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Registration access token required',
+            });
+            return;
+        }
+        const token = authHeader.substring(7);
+        const tokenClientId = verifyRegistrationToken(token);
+        if (!tokenClientId || tokenClientId !== clientId) {
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Invalid or expired registration access token',
+            });
+            return;
+        }
+        const client = findOAuthClientById(clientId);
+        if (!client) {
+            res.status(404).json({
+                error: 'invalid_client',
+                error_description: 'Client not found',
+            });
+            return;
+        }
+        // Build response
+        const response = {
+            client_id: client.clientId,
+            client_name: client.name,
+            redirect_uris: client.redirectUris,
+            grant_types: client.grants,
+            response_types: client.metadata?.response_types || ['code'],
+            scope: (client.scopes || []).join(' '),
+            token_endpoint_auth_method: client.metadata?.token_endpoint_auth_method || 'client_secret_basic',
+        };
+        // Include optional metadata
+        if (client.metadata) {
+            if (client.metadata.application_type)
+                response.application_type = client.metadata.application_type;
+            if (client.metadata.contacts)
+                response.contacts = client.metadata.contacts;
+            if (client.metadata.logo_uri)
+                response.logo_uri = client.metadata.logo_uri;
+            if (client.metadata.client_uri)
+                response.client_uri = client.metadata.client_uri;
+            if (client.metadata.policy_uri)
+                response.policy_uri = client.metadata.policy_uri;
+            if (client.metadata.tos_uri)
+                response.tos_uri = client.metadata.tos_uri;
+            if (client.metadata.jwks_uri)
+                response.jwks_uri = client.metadata.jwks_uri;
+            if (client.metadata.jwks)
+                response.jwks = client.metadata.jwks;
+        }
+        res.json(response);
+    }
+    catch (error) {
+        console.error('Get client configuration error:', error);
+        res.status(500).json({
+            error: 'server_error',
+            error_description: 'Failed to retrieve client configuration',
+        });
+    }
+};
+/**
+ * PUT /oauth/register/:clientId
+ * RFC 7591 Client Update Endpoint
+ * Update client configuration
+ */
+export const updateClientConfiguration = (req, res) => {
+    try {
+        const { clientId } = req.params;
+        const authHeader = req.headers.authorization;
+        if (!authHeader || !authHeader.startsWith('Bearer ')) {
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Registration access token required',
+            });
+            return;
+        }
+        const token = authHeader.substring(7);
+        const tokenClientId = verifyRegistrationToken(token);
+        if (!tokenClientId || tokenClientId !== clientId) {
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Invalid or expired registration access token',
+            });
+            return;
+        }
+        const client = findOAuthClientById(clientId);
+        if (!client) {
+            res.status(404).json({
+                error: 'invalid_client',
+                error_description: 'Client not found',
+            });
+            return;
+        }
+        const { redirect_uris, client_name, grant_types, scope, contacts, logo_uri, client_uri, policy_uri, tos_uri, } = req.body;
+        const settings = loadSettings();
+        const oauthConfig = settings.systemConfig?.oauthServer;
+        // Validate redirect URIs if provided
+        if (redirect_uris) {
+            if (!Array.isArray(redirect_uris) || redirect_uris.length === 0) {
+                res.status(400).json({
+                    error: 'invalid_redirect_uri',
+                    error_description: 'redirect_uris must be a non-empty array',
+                });
+                return;
+            }
+            for (const uri of redirect_uris) {
+                try {
+                    const url = new URL(uri);
+                    if (url.protocol !== 'https:' &&
+                        !url.hostname.match(/^(localhost|127\.0\.0\.1|\[::1\])$/)) {
+                        res.status(400).json({
+                            error: 'invalid_redirect_uri',
+                            error_description: `Redirect URI must use HTTPS: ${uri}`,
+                        });
+                        return;
+                    }
+                }
+                catch (e) {
+                    res.status(400).json({
+                        error: 'invalid_redirect_uri',
+                        error_description: `Invalid redirect URI: ${uri}`,
+                    });
+                    return;
+                }
+            }
+        }
+        // Validate grant types if provided
+        if (grant_types) {
+            const allowedGrantTypes = oauthConfig?.dynamicRegistration?.allowedGrantTypes || [
+                'authorization_code',
+                'refresh_token',
+            ];
+            for (const grantType of grant_types) {
+                if (!allowedGrantTypes.includes(grantType)) {
+                    res.status(400).json({
+                        error: 'invalid_client_metadata',
+                        error_description: `Grant type not allowed: ${grantType}`,
+                    });
+                    return;
+                }
+            }
+        }
+        // Validate scopes if provided
+        if (scope) {
+            const requestedScopes = scope.split(' ');
+            const allowedScopes = oauthConfig?.allowedScopes || ['read', 'write'];
+            for (const requestedScope of requestedScopes) {
+                if (!allowedScopes.includes(requestedScope)) {
+                    res.status(400).json({
+                        error: 'invalid_client_metadata',
+                        error_description: `Scope not allowed: ${requestedScope}`,
+                    });
+                    return;
+                }
+            }
+        }
+        // Build updates
+        const updates = {};
+        if (client_name)
+            updates.name = client_name;
+        if (redirect_uris)
+            updates.redirectUris = redirect_uris;
+        if (grant_types)
+            updates.grants = grant_types;
+        if (scope)
+            updates.scopes = scope.split(' ');
+        // Update metadata
+        if (client.metadata || contacts || logo_uri || client_uri || policy_uri || tos_uri) {
+            updates.metadata = {
+                ...client.metadata,
+                contacts,
+                logo_uri,
+                client_uri,
+                policy_uri,
+                tos_uri,
+            };
+        }
+        const updatedClient = updateOAuthClient(clientId, updates);
+        if (!updatedClient) {
+            res.status(500).json({
+                error: 'server_error',
+                error_description: 'Failed to update client',
+            });
+            return;
+        }
+        // Build response
+        const response = {
+            client_id: updatedClient.clientId,
+            client_name: updatedClient.name,
+            redirect_uris: updatedClient.redirectUris,
+            grant_types: updatedClient.grants,
+            response_types: updatedClient.metadata?.response_types || ['code'],
+            scope: (updatedClient.scopes || []).join(' '),
+            token_endpoint_auth_method: updatedClient.metadata?.token_endpoint_auth_method || 'client_secret_basic',
+        };
+        // Include optional metadata
+        if (updatedClient.metadata) {
+            if (updatedClient.metadata.application_type)
+                response.application_type = updatedClient.metadata.application_type;
+            if (updatedClient.metadata.contacts)
+                response.contacts = updatedClient.metadata.contacts;
+            if (updatedClient.metadata.logo_uri)
+                response.logo_uri = updatedClient.metadata.logo_uri;
+            if (updatedClient.metadata.client_uri)
+                response.client_uri = updatedClient.metadata.client_uri;
+            if (updatedClient.metadata.policy_uri)
+                response.policy_uri = updatedClient.metadata.policy_uri;
+            if (updatedClient.metadata.tos_uri)
+                response.tos_uri = updatedClient.metadata.tos_uri;
+            if (updatedClient.metadata.jwks_uri)
+                response.jwks_uri = updatedClient.metadata.jwks_uri;
+            if (updatedClient.metadata.jwks)
+                response.jwks = updatedClient.metadata.jwks;
+        }
+        res.json(response);
+    }
+    catch (error) {
+        console.error('Update client configuration error:', error);
+        res.status(500).json({
+            error: 'server_error',
+            error_description: 'Failed to update client configuration',
+        });
+    }
+};
+/**
+ * DELETE /oauth/register/:clientId
+ * RFC 7591 Client Delete Endpoint
+ * Delete client registration
+ */
+export const deleteClientRegistration = (req, res) => {
+    try {
+        const { clientId } = req.params;
+        const authHeader = req.headers.authorization;
+        if (!authHeader || !authHeader.startsWith('Bearer ')) {
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Registration access token required',
+            });
+            return;
+        }
+        const token = authHeader.substring(7);
+        const tokenClientId = verifyRegistrationToken(token);
+        if (!tokenClientId || tokenClientId !== clientId) {
+            res.status(401).json({
+                error: 'invalid_token',
+                error_description: 'Invalid or expired registration access token',
+            });
+            return;
+        }
+        const deleted = deleteOAuthClient(clientId);
+        if (!deleted) {
+            res.status(404).json({
+                error: 'invalid_client',
+                error_description: 'Client not found',
+            });
+            return;
+        }
+        // Clean up registration token
+        registrationTokens.delete(token);
+        res.status(204).send();
+    }
+    catch (error) {
+        console.error('Delete client registration error:', error);
+        res.status(500).json({
+            error: 'server_error',
+            error_description: 'Failed to delete client registration',
+        });
+    }
+};
+//# sourceMappingURL=oauthDynamicRegistrationController.js.map

package/dist/controllers/oauthDynamicRegistrationController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthDynamicRegistrationController.js","sourceRoot":"","sources":["../../src/controllers/oauthDynamicRegistrationController.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,iEAAiE;AACjE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAiD,CAAC;AAEpF;;GAEG;AACH,MAAM,yBAAyB,GAAG,CAAC,QAAgB,EAAU,EAAE;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE;QAC5B,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,uBAAuB,GAAG,CAAC,KAAa,EAAiB,EAAE;IAC/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;QAC3B,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC,QAAQ,CAAC;AACvB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;QAEvD,2CAA2C;QAC3C,IAAI,CAAC,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,4CAA4C;aAChE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,MAAM,EACJ,aAAa,EACb,WAAW,EACX,WAAW,EACX,cAAc,EACd,KAAK,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,UAAU,EACV,OAAO,EACP,QAAQ,EACR,IAAI,GACL,GAAG,GAAG,CAAC,IAAI,CAAC;QAEb,4BAA4B;QAC5B,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,sBAAsB;gBAC7B,iBAAiB,EAAE,yDAAyD;aAC7E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,yBAAyB;QACzB,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBACzB,oEAAoE;gBACpE,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;oBACzB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,CAAC,EACzD,CAAC;oBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,sBAAsB;wBAC7B,iBAAiB,EAAE,gCAAgC,GAAG,EAAE;qBACzD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,sBAAsB;oBAC7B,iBAAiB,EAAE,yBAAyB,GAAG,EAAE;iBAClD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAExD,2EAA2E;QAC3E,MAAM,UAAU,GAAG,0BAA0B,IAAI,qBAAqB,CAAC;QACvE,MAAM,WAAW,GAAG,UAAU,KAAK,MAAM,CAAC;QAC1C,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtF,sBAAsB;QACtB,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAClE,MAAM,gBAAgB,GAAG,WAAW,IAAI,iBAAiB,CAAC;QAE1D,uBAAuB;QACvB,MAAM,iBAAiB,GAAG,WAAW,CAAC,mBAAmB,CAAC,iBAAiB,IAAI;YAC7E,oBAAoB;YACpB,eAAe;SAChB,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,yBAAyB;oBAChC,iBAAiB,EAAE,2BAA2B,SAAS,EAAE;iBAC1D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,aAAa,GAAG,WAAW,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrE,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,yBAAyB;oBAChC,iBAAiB,EAAE,sBAAsB,cAAc,EAAE;iBAC1D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACpE,MAAM,OAAO,GACX,QAAQ,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpF,MAAM,qBAAqB,GAAG,GAAG,OAAO,mBAAmB,QAAQ,EAAE,CAAC;QAEtE,sBAAsB;QACtB,MAAM,MAAM,GAAiB;YAC3B,QAAQ;YACR,YAAY;YACZ,IAAI,EAAE,WAAW,IAAI,+BAA+B;YACpD,YAAY,EAAE,aAAa;YAC3B,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,eAAe;YACvB,KAAK,EAAE,sBAAsB;YAC7B,4BAA4B;YAC5B,QAAQ,EAAE;gBACR,gBAAgB,EAAE,gBAAgB,IAAI,KAAK;gBAC3C,QAAQ;gBACR,QAAQ;gBACR,UAAU;gBACV,UAAU;gBACV,OAAO;gBACP,QAAQ;gBACR,IAAI;gBACJ,0BAA0B,EAAE,UAAU;gBACtC,cAAc,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC;aAC3C;SACF,CAAC;QAEF,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEhD,uCAAuC;QACvC,MAAM,QAAQ,GAAQ;YACpB,SAAS,EAAE,aAAa,CAAC,QAAQ;YACjC,WAAW,EAAE,aAAa,CAAC,IAAI;YAC/B,aAAa,EAAE,aAAa,CAAC,YAAY;YACzC,WAAW,EAAE,aAAa,CAAC,MAAM;YACjC,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC;YAC3D,KAAK,EAAE,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,0BAA0B,EAAE,UAAU;YACtC,yBAAyB,EAAE,uBAAuB;YAClD,uBAAuB,EAAE,qBAAqB;YAC9C,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACnD,CAAC;QAEF,qCAAqC;QACrC,IAAI,YAAY,EAAE,CAAC;YACjB,QAAQ,CAAC,aAAa,GAAG,YAAY,CAAC;YACtC,QAAQ,CAAC,wBAAwB,GAAG,CAAC,CAAC,CAAC,4BAA4B;QACrE,CAAC;QAED,4BAA4B;QAC5B,IAAI,gBAAgB;YAAE,QAAQ,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACnE,IAAI,QAAQ;YAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3C,IAAI,QAAQ;YAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3C,IAAI,UAAU;YAAE,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;QACjD,IAAI,UAAU;YAAE,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;QACjD,IAAI,OAAO;YAAE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;QACxC,IAAI,QAAQ;YAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3C,IAAI,IAAI;YAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QAE/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QAE3D,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,yBAAyB;gBAChC,iBAAiB,EAAE,oCAAoC;aACxD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,2BAA2B;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAE7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,oCAAoC;aACxD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAErD,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,8CAA8C;aAClE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,gBAAgB;gBACvB,iBAAiB,EAAE,kBAAkB;aACtC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAQ;YACpB,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC;YAC3D,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACtC,0BAA0B,EACxB,MAAM,CAAC,QAAQ,EAAE,0BAA0B,IAAI,qBAAqB;SACvE,CAAC;QAEF,4BAA4B;QAC5B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB;gBAClC,QAAQ,CAAC,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3E,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3E,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU;gBAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjF,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU;gBAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjF,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO;gBAAE,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACxE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3E,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjE,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,yCAAyC;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IAC7E,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAE7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,oCAAoC;aACxD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAErD,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,8CAA8C;aAClE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,gBAAgB;gBACvB,iBAAiB,EAAE,kBAAkB;aACtC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,EACJ,aAAa,EACb,WAAW,EACX,WAAW,EACX,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,UAAU,EACV,OAAO,GACR,GAAG,GAAG,CAAC,IAAI,CAAC;QAEb,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;QAEvD,qCAAqC;QACrC,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,sBAAsB;oBAC7B,iBAAiB,EAAE,yCAAyC;iBAC7D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;oBACzB,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;wBACzB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,CAAC,EACzD,CAAC;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;4BACnB,KAAK,EAAE,sBAAsB;4BAC7B,iBAAiB,EAAE,gCAAgC,GAAG,EAAE;yBACzD,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,sBAAsB;wBAC7B,iBAAiB,EAAE,yBAAyB,GAAG,EAAE;qBAClD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,iBAAiB,GAAG,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,IAAI;gBAC/E,oBAAoB;gBACpB,eAAe;aAChB,CAAC;YACF,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;gBACpC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,yBAAyB;wBAChC,iBAAiB,EAAE,2BAA2B,SAAS,EAAE;qBAC1D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,aAAa,GAAG,WAAW,EAAE,aAAa,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtE,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;gBAC7C,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,yBAAyB;wBAChC,iBAAiB,EAAE,sBAAsB,cAAc,EAAE;qBAC1D,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,OAAO,GAA0B,EAAE,CAAC;QAC1C,IAAI,WAAW;YAAE,OAAO,CAAC,IAAI,GAAG,WAAW,CAAC;QAC5C,IAAI,aAAa;YAAE,OAAO,CAAC,YAAY,GAAG,aAAa,CAAC;QACxD,IAAI,WAAW;YAAE,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;QAC9C,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7C,kBAAkB;QAClB,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,IAAI,QAAQ,IAAI,UAAU,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YACnF,OAAO,CAAC,QAAQ,GAAG;gBACjB,GAAG,MAAM,CAAC,QAAQ;gBAClB,QAAQ;gBACR,QAAQ;gBACR,UAAU;gBACV,UAAU;gBACV,OAAO;aACR,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE3D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,yBAAyB;aAC7C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAQ;YACpB,SAAS,EAAE,aAAa,CAAC,QAAQ;YACjC,WAAW,EAAE,aAAa,CAAC,IAAI;YAC/B,aAAa,EAAE,aAAa,CAAC,YAAY;YACzC,WAAW,EAAE,aAAa,CAAC,MAAM;YACjC,cAAc,EAAE,aAAa,CAAC,QAAQ,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC;YAClE,KAAK,EAAE,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7C,0BAA0B,EACxB,aAAa,CAAC,QAAQ,EAAE,0BAA0B,IAAI,qBAAqB;SAC9E,CAAC;QAEF,4BAA4B;QAC5B,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,aAAa,CAAC,QAAQ,CAAC,gBAAgB;gBACzC,QAAQ,CAAC,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACtE,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzF,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzF,IAAI,aAAa,CAAC,QAAQ,CAAC,UAAU;gBACnC,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC1D,IAAI,aAAa,CAAC,QAAQ,CAAC,UAAU;gBACnC,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC1D,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO;gBAAE,QAAQ,CAAC,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;YACtF,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ;gBAAE,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzF,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/E,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,uCAAuC;SAC3D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;IAC5E,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAE7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,oCAAoC;aACxD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAErD,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,8CAA8C;aAClE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,gBAAgB;gBACvB,iBAAiB,EAAE,kBAAkB;aACtC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,sCAAsC;SAC1D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC"}