@sikkuumiii/defuse 0.0.0-stage → 0.5.0

package/dist/src/platform/runtime-version.js

@@ -0,0 +1,573 @@
+/**
+ * THE RUNTIME VERSION CHECK: WHICH PHP DOES THIS PROJECT SAY IT RUNS ON?
+ * =====================================================================
+ *
+ * Every other check in Defuse reads the code a project contains. PHP2Shell
+ * (CVE-2026-109618 / CVE-2026-109619, October 2026) was a reminder that perfect
+ * code on PHP 8.2.20 is still a server an attacker can take over: the bug was
+ * in PHP itself. Reading code cannot find that. Reading the version the
+ * project declares can - Dockerfiles, compose files, composer.json and
+ * `.php-version` all say which PHP the project expects.
+ *
+ * WHAT IT CAN AND CANNOT CLAIM. A declaration is not the server. A Dockerfile
+ * that says 8.2.20 may have been replaced, and one that says `php:8.2-apache`
+ * gets whatever 8.2 release was current when the image was built. So every
+ * result here is signature-based - a match against a declaration, never a
+ * proof about what runs - and every message says which file it read and how
+ * old the facts behind it are (php-facts.ts).
+ *
+ * Platform-free like the rest of the analysis: it takes text and returns
+ * findings, and the walker in engine/ decides which files to hand it.
+ */
+import { signatureFinding } from '../core/finding.js';
+import { isTestPath } from '../rules/lib/strings.js';
+import { PHP_ADVISORIES, PHP_END_OF_LIFE, PHP_FACTS_CHECKED, PHP_SECURITY_UNTIL, } from './php-facts.js';
+export const RUNTIME_VERSION_RULE = {
+    id: 'runtime-version',
+    name: 'PHP version with a known critical flaw or no security support',
+    owasp: 'A03:2025 Software Supply Chain Failures',
+    summary: 'The project runs on a PHP version with a known serious flaw, or one that no longer gets security fixes.',
+    fix: 'Upgrade PHP to a supported release and update the version declared in the Dockerfile or composer.json.',
+    explanation: 'A program is only as safe as the language runtime under it. When the PHP version a project ' +
+        'runs on has a known critical flaw, or no longer gets security fixes at all, an attacker can ' +
+        'break in without any mistake in the project\'s own code. The fix is an upgrade, not a code change.',
+    limitations: 'Reads only: FROM lines that use the official `php` Docker image (Dockerfile, Dockerfile.*, *.dockerfile), ' +
+        '`image:` lines in docker-compose and compose files, composer.json (`require.php` and `config.platform.php`) ' +
+        'and `.php-version`. NOT read: other images that contain PHP (bitnami, webdevops, a distribution image with ' +
+        'PHP installed by apt or apk), CI matrices, php.ini settings, or the running server - a declaration is not ' +
+        'the server, so confirm with `php -v` where the code runs. Linux distributions often backport security ' +
+        'fixes without changing the version number, so an old number in a distribution package may be patched; ' +
+        'this check knows the official numbers only. The advisory list holds critical, exploited issues only and ' +
+        'is not a vulnerability database. Runs in the command line and the client report, not the browser page.',
+};
+const cmpVersion = (a, b) => a[0] - b[0] || a[1] - b[1] || a[2] - b[2];
+const branchOf = (v) => `${v[0]}.${v[1]}`;
+const branchVersion = (branch) => {
+    const [maj, min] = branch.split('.').map(Number);
+    return [maj ?? 0, min ?? 0, 0];
+};
+const cmpBranch = (a, b) => cmpVersion(branchVersion(a), branchVersion(b));
+const MONTHS = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
+/** `2026-12-31` -> `31 Dec 2026`. */
+export function readableDate(iso) {
+    const [y, m, d] = iso.split('-').map(Number);
+    return `${d} ${MONTHS[(m ?? 1) - 1]} ${y}`;
+}
+const daysBetween = (from, to) => Math.round((Date.parse(`${to}T00:00:00Z`) - Date.parse(`${from}T00:00:00Z`)) / 86_400_000);
+/** Every branch the table knows, oldest first. */
+const KNOWN_BRANCHES = [...Object.keys(PHP_END_OF_LIFE), ...Object.keys(PHP_SECURITY_UNTIL)].sort(cmpBranch);
+const NEWEST_KNOWN = KNOWN_BRANCHES[KNOWN_BRANCHES.length - 1] ?? '8.5';
+const OLDEST_KNOWN = KNOWN_BRANCHES[0] ?? '5.0';
+function branchStatus(branch, today) {
+    const until = PHP_SECURITY_UNTIL[branch];
+    if (until)
+        return today > until ? { kind: 'eol', since: until } : { kind: 'supported', until };
+    const since = PHP_END_OF_LIFE[branch];
+    if (since)
+        return { kind: 'eol', since };
+    if (cmpBranch(branch, OLDEST_KNOWN) < 0)
+        return { kind: 'eol', since: null };
+    return { kind: 'unknown' };
+}
+/** Branches still supported on the day of the scan, newest first. */
+const supportedBranches = (today) => Object.keys(PHP_SECURITY_UNTIL)
+    .filter((b) => branchStatus(b, today).kind === 'supported')
+    .sort((a, b) => cmpBranch(b, a));
+/** How an advisory bears on one branch: fixed from a release, never fixed, or not affected. */
+function advisoryFor(adv, branch) {
+    const fixed = adv.fixedIn[branch];
+    if (fixed)
+        return { fixedIn: fixed };
+    const fixedBranches = Object.keys(adv.fixedIn).sort(cmpBranch);
+    const oldestFixed = fixedBranches[0];
+    if (oldestFixed && cmpBranch(branch, adv.oldestAffected) >= 0 && cmpBranch(branch, oldestFixed) < 0) {
+        return { noFix: true };
+    }
+    return null;
+}
+const parseExact = (s) => {
+    const m = /^(\d+)\.(\d+)\.(\d+)$/.exec(s);
+    return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
+};
+/** The tag of the official image: `8.2.20-apache`, `8.2-fpm`, `8-cli`, `apache`, none. */
+function pinnedByTag(tag, today) {
+    if (tag === null || tag === '' || tag === 'latest' || /^[a-z]/i.test(tag)) {
+        const newest = supportedBranches(today)[0];
+        return newest
+            ? { kind: 'branch', branch: newest, how: `a tag with no version number, which follows the newest release (${newest} today)` }
+            : { kind: 'unknown', why: 'a tag with no version number, and no branch in the table is still supported' };
+    }
+    const m = /^(\d+)(?:\.(\d+))?(?:\.(\d+))?((?:rc|alpha|beta)\d*)?(?:-|$)/i.exec(tag);
+    if (!m)
+        return { kind: 'unknown', why: `a tag Defuse cannot read a version from (\`${tag}\`)` };
+    const [maj, min, patch, pre] = [m[1], m[2], m[3], m[4]];
+    if (min !== undefined && patch !== undefined) {
+        return { kind: 'exact', version: [Number(maj), Number(min), Number(patch)], prerelease: pre !== undefined };
+    }
+    if (min !== undefined) {
+        return { kind: 'branch', branch: `${maj}.${min}`, how: `a branch tag, which follows the newest ${maj}.${min} release` };
+    }
+    const newestOfMajor = supportedBranches(today).find((b) => b.startsWith(`${maj}.`));
+    return newestOfMajor
+        ? { kind: 'branch', branch: newestOfMajor, how: `a major-version tag, which follows the newest ${maj}.x release (${newestOfMajor} today)` }
+        : { kind: 'unknown', why: `a major-version tag (\`${tag}\`) with no supported branch in the table` };
+}
+/* ------------------------------------------------------------- readers -- */
+const isOfficialPhpImage = (name) => name === 'php' || name === 'docker.io/php' || /(^|\/)library\/php$/.test(name);
+/** `php:8.2-apache@sha256:...` -> name, tag and digest. */
+function splitImage(ref) {
+    const at = ref.indexOf('@');
+    const digest = at >= 0 ? ref.slice(at + 1) : null;
+    const base = at >= 0 ? ref.slice(0, at) : ref;
+    const slash = base.lastIndexOf('/');
+    const colon = base.lastIndexOf(':');
+    if (colon > slash)
+        return { name: base.slice(0, colon).toLowerCase(), tag: base.slice(colon + 1), digest };
+    return { name: base.toLowerCase(), tag: null, digest };
+}
+function readImage(file, lineNo, column, lineText, ref, source, where, nodeType, today) {
+    if (/\$/.test(ref)) {
+        const { name } = splitImage(ref.replace(/\$\{?\w+(?::-[^}]*)?\}?/g, 'x'));
+        if (!isOfficialPhpImage(name))
+            return null;
+        return {
+            file, line: lineNo, column, text: ref, lineText, source, where, nodeType,
+            pinned: { kind: 'unknown', why: 'a version set by a build argument with no default value in the file' },
+        };
+    }
+    const { name, tag, digest } = splitImage(ref);
+    if (!isOfficialPhpImage(name))
+        return null;
+    const pinned = tag === null && digest !== null
+        ? { kind: 'unknown', why: 'an image pinned by digest only, which does not show the version' }
+        : pinnedByTag(tag, today);
+    return { file, line: lineNo, column, text: ref, lineText, source, where, nodeType, pinned };
+}
+function readDockerfile(file, today) {
+    const out = [];
+    const args = new Map();
+    const stages = new Set();
+    file.text.split(/\r?\n/).forEach((lineText, index) => {
+        const arg = /^\s*ARG\s+(\w+)=["']?([^"'\s]*)["']?\s*$/i.exec(lineText);
+        if (arg?.[1] && arg[2] !== undefined)
+            args.set(arg[1], arg[2]);
+        const from = /^(\s*FROM\s+(?:--\S+\s+)*)(\S+)(?:\s+AS\s+(\S+))?/i.exec(lineText);
+        if (!from?.[2])
+            return;
+        const raw = from[2];
+        const ref = raw.replace(/\$\{(\w+)(?::-([^}]*))?\}|\$(\w+)/g, (whole, a, dflt, b) => {
+            const value = args.get(a ?? b);
+            return value !== undefined && value !== '' ? value : dflt !== undefined ? dflt : whole;
+        });
+        if (stages.has(ref.toLowerCase()))
+            return; // an earlier build stage, not an image
+        if (from[3])
+            stages.add(from[3].toLowerCase());
+        const declaration = readImage(file.path, index + 1, (from[1]?.length ?? 0) + 1, lineText, ref, 'Dockerfile FROM', `${file.path} on line ${index + 1}`, 'dockerfile-from', today);
+        if (declaration)
+            out.push(declaration);
+    });
+    return out;
+}
+function readCompose(file, today) {
+    const out = [];
+    file.text.split(/\r?\n/).forEach((lineText, index) => {
+        const m = /^(\s*image:\s*)["']?([^"'\s#]+)["']?/.exec(lineText);
+        if (!m?.[2])
+            return;
+        const declaration = readImage(file.path, index + 1, (m[1]?.length ?? 0) + 1, lineText, m[2], 'compose image', `${file.path} on line ${index + 1}`, 'compose-image', today);
+        if (declaration)
+            out.push(declaration);
+    });
+    return out;
+}
+/** The 1-based line holding `"php": "<value>"`, searching from a given line. */
+function lineOfPhpKey(lines, value, from = 0) {
+    const escaped = value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const re = new RegExp(`"php"\\s*:\\s*"${escaped}"`);
+    for (let i = from; i < lines.length; i++)
+        if (re.test(lines[i] ?? ''))
+            return i + 1;
+    return 1;
+}
+function readComposerJson(file, notes) {
+    let json;
+    try {
+        json = JSON.parse(file.text);
+    }
+    catch {
+        notes.push(`${file.path} is not valid JSON, so the PHP version it declares could not be read.`);
+        return [];
+    }
+    const obj = (json ?? {});
+    const lines = file.text.split(/\r?\n/);
+    const out = [];
+    const required = obj.require?.['php'];
+    if (typeof required === 'string') {
+        const line = lineOfPhpKey(lines, required);
+        out.push({
+            file: file.path, line, column: 1, text: required, lineText: lines[line - 1] ?? '',
+            source: 'composer.json require', where: `${file.path} (\`require\`, line ${line})`,
+            nodeType: 'composer-require', pinned: null, range: required,
+        });
+    }
+    const platform = obj.config?.platform?.['php'];
+    if (typeof platform === 'string') {
+        const configLine = Math.max(0, lines.findIndex((l) => /"platform"\s*:/.test(l)));
+        const line = lineOfPhpKey(lines, platform, configLine);
+        const version = parseExact(platform.trim());
+        const branch = /^(\d+)\.(\d+)$/.exec(platform.trim());
+        out.push({
+            file: file.path, line, column: 1, text: platform, lineText: lines[line - 1] ?? '',
+            source: 'composer.json config.platform', where: `${file.path} (\`config.platform\`, line ${line})`,
+            nodeType: 'composer-platform',
+            pinned: version
+                ? { kind: 'exact', version, prerelease: false }
+                : branch
+                    ? { kind: 'branch', branch: `${branch[1]}.${branch[2]}`, how: 'a branch number with no release number' }
+                    : { kind: 'unknown', why: `a platform version Defuse cannot read (\`${platform}\`)` },
+        });
+    }
+    return out;
+}
+function readPhpVersionFile(file) {
+    const lines = file.text.split(/\r?\n/);
+    const index = lines.findIndex((l) => l.trim() !== '' && !l.trim().startsWith('#'));
+    if (index < 0)
+        return [];
+    const raw = (lines[index] ?? '').trim();
+    const value = raw.replace(/^php[-@]?/i, '');
+    const version = parseExact(value);
+    const branch = /^(\d+)\.(\d+)$/.exec(value);
+    return [{
+            file: file.path, line: index + 1, column: 1, text: raw, lineText: raw,
+            source: '.php-version', where: `${file.path}`, nodeType: 'php-version-file',
+            pinned: version
+                ? { kind: 'exact', version, prerelease: false }
+                : branch
+                    ? { kind: 'branch', branch: `${branch[1]}.${branch[2]}`, how: 'a branch number with no release number' }
+                    : { kind: 'unknown', why: `a value Defuse cannot read a version from (\`${raw}\`)` },
+        }];
+}
+/** Which reader a file needs, by its name alone. Exported for the walker. */
+export function runtimeFileKind(fileName) {
+    const name = fileName.toLowerCase();
+    if (name === 'dockerfile' || name.startsWith('dockerfile.') || name.endsWith('.dockerfile'))
+        return 'dockerfile';
+    if (/^(docker-)?compose(\.[\w-]+)?\.ya?ml$/.test(name))
+        return 'compose';
+    if (name === 'composer.json')
+        return 'composer';
+    if (name === '.php-version')
+        return 'php-version';
+    return null;
+}
+/**
+ * A composer version constraint, as alternatives of conditions - `^7.4 || ^8.0`
+ * is two alternatives. Null when any part cannot be read: an unreadable range
+ * is reported as unreadable, never guessed at.
+ */
+export function parseComposerRange(constraint) {
+    const alternatives = constraint.split(/\s*\|\|?\s*/).filter((a) => a.trim() !== '');
+    if (alternatives.length === 0)
+        return null;
+    const out = [];
+    for (const alternative of alternatives) {
+        const hyphen = /^\s*(\S+)\s+-\s+(\S+)\s*$/.exec(alternative);
+        if (hyphen?.[1] && hyphen[2]) {
+            const low = partial(hyphen[1]);
+            const high = partial(hyphen[2]);
+            if (!low || !high)
+                return null;
+            out.push([
+                { op: '>=', v: low.v },
+                high.parts === 3 ? { op: '<=', v: high.v } : { op: '<', v: bump(high.v, high.parts - 1) },
+            ]);
+            continue;
+        }
+        const conditions = [];
+        for (const token of alternative.trim().split(/[\s,]+/)) {
+            const parsed = condition(token);
+            if (!parsed)
+                return null;
+            conditions.push(...parsed);
+        }
+        out.push(conditions);
+    }
+    return out;
+}
+/** `8.2` -> [8,2,0] with 2 parts given. */
+function partial(text) {
+    const m = /^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?(?:\.\d+)?$/.exec(text.replace(/@\w+$/, '').replace(/-[\w.]+$/, ''));
+    if (!m)
+        return null;
+    const parts = m[3] !== undefined ? 3 : m[2] !== undefined ? 2 : 1;
+    return { v: [Number(m[1]), Number(m[2] ?? 0), Number(m[3] ?? 0)], parts };
+}
+/** The next version up at a given position: bump([8,2,0], 1) is 8.3.0. */
+function bump(v, position) {
+    if (position <= 0)
+        return [v[0] + 1, 0, 0];
+    if (position === 1)
+        return [v[0], v[1] + 1, 0];
+    return [v[0], v[1], v[2] + 1];
+}
+function condition(token) {
+    if (token === '*' || token === '')
+        return [];
+    const wildcard = /^v?(\d+)(?:\.(\d+))?\.\*$/.exec(token);
+    if (wildcard) {
+        const v = [Number(wildcard[1]), Number(wildcard[2] ?? 0), 0];
+        return [{ op: '>=', v }, { op: '<', v: bump(v, wildcard[2] === undefined ? 0 : 1) }];
+    }
+    const m = /^(\^|~|>=|<=|>|<|==?|!=)?(.+)$/.exec(token);
+    if (!m?.[2])
+        return null;
+    const p = partial(m[2]);
+    if (!p)
+        return null;
+    switch (m[1]) {
+        case '^':
+            return [{ op: '>=', v: p.v }, { op: '<', v: bump(p.v, 0) }];
+        case '~':
+            return [{ op: '>=', v: p.v }, { op: '<', v: bump(p.v, p.parts >= 3 ? 1 : 0) }];
+        case '>=':
+        case '>':
+        case '<':
+        case '<=':
+        case '!=':
+            return [{ op: m[1], v: p.v }];
+        default:
+            // A bare `8.2` is read as the whole 8.2 branch, `8` as all of 8.x.
+            return p.parts === 3
+                ? [{ op: '=', v: p.v }]
+                : [{ op: '>=', v: p.v }, { op: '<', v: bump(p.v, p.parts - 1) }];
+    }
+}
+function satisfies(v, range) {
+    return range.some((conditions) => conditions.every(({ op, v: w }) => {
+        const c = cmpVersion(v, w);
+        return op === '>=' ? c >= 0 : op === '>' ? c > 0 : op === '<' ? c < 0 : op === '<=' ? c <= 0 : op === '=' ? c === 0 : c !== 0;
+    }));
+}
+/** Whether any release of a branch fits the range. Tried at both ends of the branch. */
+const branchAllowed = (branch, range) => {
+    const [maj, min] = branchVersion(branch);
+    return satisfies([maj, min, 0], range) || satisfies([maj, min, 999], range);
+};
+const confirmHint = 'Defuse read the version this file declares; the server can run a different one, so confirm with `php -v` where the code runs.';
+function exactVerdict(d, v, prerelease, today) {
+    const version = v.join('.') + (prerelease ? ' (a pre-release)' : '');
+    const branch = branchOf(v);
+    const status = branchStatus(branch, today);
+    if (status.kind === 'unknown') {
+        return {
+            severity: null, cwe: 'CWE-1395', message: '', reasoning: '',
+            status: `PHP ${version}: branch ${branch} is newer than Defuse's table (checked ${readableDate(PHP_FACTS_CHECKED)}), so nothing is known about it`,
+        };
+    }
+    const hits = PHP_ADVISORIES.map((adv) => ({ adv, bearing: advisoryFor(adv, branch) })).filter((h) => h.bearing !== null &&
+        ('noFix' in h.bearing || cmpVersion(v, parseExact(h.bearing.fixedIn) ?? [0, 0, 0]) < 0));
+    const lines = [];
+    for (const { adv, bearing } of hits) {
+        lines.push('fixedIn' in bearing
+            ? `PHP ${version} is older than ${bearing.fixedIn}, the release that fixes ${adv.cves.join(' and ')} ` +
+                `("${adv.name}", ${readableDate(adv.published)}): ${adv.impact}. Upgrade to ${bearing.fixedIn} or later.`
+            : `PHP ${version} is affected by ${adv.cves.join(' and ')} ("${adv.name}", ${readableDate(adv.published)}): ` +
+                `${adv.impact}. No official ${branch} release has the fix; some Linux distributions ship their own patched builds.`);
+    }
+    if (status.kind === 'eol') {
+        lines.push(status.since
+            ? `Branch ${branch} has had no security fixes since ${readableDate(status.since)}; move to a supported branch (${supportedBranches(today).slice().reverse().join(', ')}).`
+            : `Branch ${branch} went out of support long before any date in Defuse's table.`);
+    }
+    if (lines.length === 0) {
+        return {
+            severity: null, cwe: 'CWE-1395', message: '', reasoning: '',
+            status: `PHP ${version}: no critical advisory in Defuse's table` +
+                (status.kind === 'supported' ? `; security support until ${readableDate(status.until)}` : ''),
+        };
+    }
+    const first = hits[0];
+    const message = first
+        ? 'fixedIn' in first.bearing
+            ? `PHP ${version} (${d.source}) is missing the ${first.adv.name} fix - ${first.bearing.fixedIn} has it`
+            : `PHP ${version} (${d.source}) is out of support - no official release has the ${first.adv.name} fix`
+        : `PHP ${version} (${d.source}) gets no security fixes any more`;
+    return {
+        severity: hits.length > 0 ? 'critical' : 'high',
+        cwe: hits.length > 0 ? 'CWE-1395' : 'CWE-1104',
+        message,
+        reasoning: `${d.where} declares PHP ${version}. ${lines.join(' ')} ${confirmHint}`,
+        status: hits.length > 0 ? `PHP ${version}: ${hits.map((h) => h.adv.name).join(', ')} not fixed` : `PHP ${version}: out of support`,
+    };
+}
+function branchVerdict(d, branch, how, today) {
+    const status = branchStatus(branch, today);
+    if (status.kind === 'unknown') {
+        return {
+            severity: null, cwe: 'CWE-1395', message: '', reasoning: '',
+            status: `PHP ${branch}: newer than Defuse's table (checked ${readableDate(PHP_FACTS_CHECKED)}), so nothing is known about it`,
+        };
+    }
+    if (status.kind === 'eol') {
+        // Every build of an out-of-support branch is the same answer as a pinned one.
+        const noFix = PHP_ADVISORIES.filter((adv) => advisoryFor(adv, branch) !== null);
+        const since = status.since ? ` since ${readableDate(status.since)}` : '';
+        return {
+            severity: noFix.length > 0 ? 'critical' : 'high',
+            cwe: noFix.length > 0 ? 'CWE-1395' : 'CWE-1104',
+            message: `PHP ${branch} (${d.source}) is out of support${noFix.length > 0 ? ` - no official release has the ${noFix[0]?.name} fix` : ''}`,
+            reasoning: `${d.where} declares \`${d.text}\` - ${how}. Branch ${branch} has had no security fixes${since}` +
+                (noFix.length > 0
+                    ? `, and no official ${branch} release will fix ${noFix.map((a) => `${a.cves.join(' and ')} ("${a.name}": ${a.impact})`).join('; ')}.`
+                    : '.') +
+                ` Move to a supported branch (${supportedBranches(today).slice().reverse().join(', ')}). ${confirmHint}`,
+            status: `PHP ${branch}: out of support`,
+        };
+    }
+    const fixes = PHP_ADVISORIES.flatMap((adv) => {
+        const bearing = advisoryFor(adv, branch);
+        return bearing && 'fixedIn' in bearing ? [{ adv, fixedIn: bearing.fixedIn }] : [];
+    });
+    if (fixes.length === 0) {
+        return {
+            severity: null, cwe: 'CWE-1395', message: '', reasoning: '',
+            status: `PHP ${branch} (floating): security support until ${readableDate(status.until)}`,
+        };
+    }
+    const newest = fixes[0];
+    return {
+        severity: 'low',
+        cwe: 'CWE-1395',
+        message: `${d.text} (${d.source}) has the ${newest?.adv.name} fix only if built after ${readableDate(newest?.adv.published ?? '')}`,
+        reasoning: `${d.where} declares \`${d.text}\` - ${how}, so the exact release depends on when the image was built or ` +
+            `pulled, and Defuse cannot see that. ` +
+            fixes
+                .map(({ adv, fixedIn }) => `${adv.cves.join(' and ')} ("${adv.name}": ${adv.impact}) ${adv.cves.length > 1 ? 'are' : 'is'} fixed in ${fixedIn}, released ` +
+                `${readableDate(adv.published)}; an image built before then does not have it.`)
+                .join(' ') +
+            ` Rebuild with \`docker build --pull\` (or pin ${newest?.fixedIn} or later). ${confirmHint}`,
+        status: `PHP ${branch} (floating): has the ${newest?.adv.name} fix only if built after ${readableDate(newest?.adv.published ?? '')}`,
+    };
+}
+function rangeVerdict(d, range, today) {
+    const parsed = parseComposerRange(range);
+    if (!parsed) {
+        return { severity: null, cwe: 'CWE-1104', message: '', reasoning: '', status: `\`${range}\`: a range Defuse cannot read` };
+    }
+    const allowedKnown = KNOWN_BRANCHES.filter((b) => branchAllowed(b, parsed));
+    const allowedSupported = supportedBranches(today).filter((b) => branchAllowed(b, parsed));
+    const [nmaj, nmin] = branchVersion(NEWEST_KNOWN);
+    const allowsNewer = satisfies([nmaj, nmin + 1, 0], parsed) || satisfies([nmaj + 1, 0, 0], parsed);
+    if (allowedSupported.length > 0 || allowsNewer || allowedKnown.length === 0) {
+        return {
+            severity: null, cwe: 'CWE-1104', message: '', reasoning: '',
+            status: allowedSupported.length > 0
+                ? `\`${range}\`: allows supported branches (${allowedSupported.slice().reverse().join(', ')}); a range does not say which one runs`
+                : `\`${range}\`: allows only branches newer than Defuse's table`,
+        };
+    }
+    const newest = allowedKnown[allowedKnown.length - 1] ?? '';
+    const noFix = PHP_ADVISORIES.filter((adv) => allowedKnown.every((b) => advisoryFor(adv, b) !== null));
+    return {
+        severity: 'high',
+        cwe: 'CWE-1104',
+        message: `composer.json allows only PHP versions that are out of security support (\`${range}\`)`,
+        reasoning: `${d.where} requires PHP \`${range}\`, which fits no branch that still gets security fixes - the newest it ` +
+            `allows is ${newest}, out of support since ${readableDate(PHP_END_OF_LIFE[newest] ?? PHP_SECURITY_UNTIL[newest] ?? PHP_FACTS_CHECKED)}.` +
+            (noFix.length > 0
+                ? ` No official release in those branches fixes ${noFix.map((a) => `${a.cves.join(' and ')} ("${a.name}")`).join(', ')}.`
+                : '') +
+            ' This is the range the project says it runs on, not proof of what the server runs: confirm with `php -v` where the code runs.',
+        status: `\`${range}\`: out-of-support branches only`,
+    };
+}
+/* ------------------------------------------------------------------ main -- */
+export function checkRuntimeVersions(files, options) {
+    const notes = [];
+    const declarations = [];
+    for (const file of files) {
+        const kind = runtimeFileKind(file.path.split(/[\\/]/).pop() ?? '');
+        if (kind === 'dockerfile')
+            declarations.push(...readDockerfile(file, options.today));
+        else if (kind === 'compose')
+            declarations.push(...readCompose(file, options.today));
+        else if (kind === 'composer')
+            declarations.push(...readComposerJson(file, notes));
+        else if (kind === 'php-version')
+            declarations.push(...readPhpVersionFile(file));
+    }
+    const findings = [];
+    const declared = [];
+    for (const d of declarations) {
+        const verdict = d.range !== undefined
+            ? rangeVerdict(d, d.range, options.today)
+            : d.pinned?.kind === 'exact'
+                ? exactVerdict(d, d.pinned.version, d.pinned.prerelease, options.today)
+                : d.pinned?.kind === 'branch'
+                    ? branchVerdict(d, d.pinned.branch, d.pinned.how, options.today)
+                    : null;
+        declared.push({
+            file: d.file,
+            line: d.line,
+            source: d.source,
+            declared: d.text,
+            status: verdict?.status ?? `version not visible: ${d.pinned?.kind === 'unknown' ? d.pinned.why : 'unreadable'}`,
+        });
+        if (!verdict?.severity)
+            continue;
+        const inTestFile = isTestPath(d.file);
+        const severity = !inTestFile
+            ? verdict.severity
+            : verdict.severity === 'critical' ? 'medium' : verdict.severity === 'high' ? 'low' : verdict.severity;
+        const snippet = d.lineText.trim();
+        findings.push(signatureFinding({
+            ruleId: RUNTIME_VERSION_RULE.id,
+            ruleName: RUNTIME_VERSION_RULE.name,
+            cwe: verdict.cwe,
+            owasp: RUNTIME_VERSION_RULE.owasp,
+            severity,
+            message: verdict.message,
+            location: {
+                file: d.file,
+                startLine: d.line,
+                startColumn: d.column,
+                endLine: d.line,
+                endColumn: d.column + d.text.length,
+                astNodeType: d.nodeType,
+                astNodePath: `${d.source}`,
+                snippet: snippet.length > 160 ? `${snippet.slice(0, 159)}…` : snippet,
+            },
+            reasoning: `${verdict.reasoning} Facts from php.net, checked ${readableDate(PHP_FACTS_CHECKED)}.` +
+                (inTestFile
+                    ? ' NOTE: this file looks like a test, fixture or example. The finding is accurate about the ' +
+                        'file, but a test setup is not reachable by an attacker, so severity is lowered rather than ' +
+                        'the finding dropped.'
+                    : ''),
+            limitations: RUNTIME_VERSION_RULE.limitations,
+        }));
+    }
+    /*
+     * THE SILENCE THIS CHECK MUST NOT LEAVE. A PHP project with no readable
+     * version declaration gets no finding - and "no finding" would read as "the
+     * PHP version is fine". Say what was not checked instead.
+     */
+    if (options.phpFilesScanned > 0) {
+        if (declarations.length === 0) {
+            notes.push('This project has PHP files but declares no PHP version Defuse can read (the official php image in a ' +
+                'Dockerfile or compose file, composer.json, or .php-version), so the PHP version it runs on was not checked.');
+        }
+        else if (declarations.every((d) => d.range !== undefined)) {
+            notes.push('The only PHP version this project declares is a composer.json range, which does not say which release ' +
+                'runs. Check the server with `php -v`.');
+        }
+    }
+    const age = daysBetween(PHP_FACTS_CHECKED, options.today);
+    if (declarations.length > 0 && age > 180) {
+        notes.push(`Defuse's PHP release table was checked ${age} days before this scan (${readableDate(PHP_FACTS_CHECKED)}). ` +
+            'Releases and advisories since then are not known to it.');
+    }
+    return { findings, declared, notes, factsChecked: PHP_FACTS_CHECKED };
+}
+//# sourceMappingURL=runtime-version.js.map

package/dist/src/platform/runtime-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-version.js","sourceRoot":"","sources":["../../../src/platform/runtime-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,gBAAgB,EAAwC,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,+DAA+D;IACrE,KAAK,EAAE,yCAAyC;IAChD,OAAO,EAAE,yGAAyG;IAClH,GAAG,EAAE,wGAAwG;IAC7G,WAAW,EACT,6FAA6F;QAC7F,8FAA8F;QAC9F,oGAAoG;IACtG,WAAW,EACT,4GAA4G;QAC5G,8GAA8G;QAC9G,6GAA6G;QAC7G,4GAA4G;QAC5G,wGAAwG;QACxG,wGAAwG;QACxG,0GAA0G;QAC1G,wGAAwG;CAClG,CAAC;AAwCX,MAAM,UAAU,GAAG,CAAC,CAAU,EAAE,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,MAAM,aAAa,GAAG,CAAC,MAAc,EAAW,EAAE;IAChD,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC,CAAC;AACF,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnG,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACpG,qCAAqC;AACrC,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7C,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAU,EAAU,EAAE,CACvD,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;AAE7F,kDAAkD;AAClD,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC7G,MAAM,YAAY,GAAG,cAAc,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC;AACxE,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;AAOhD,SAAS,YAAY,CAAC,MAAc,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK;QAAE,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC/F,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;AAED,qEAAqE;AACrE,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAY,EAAE,CACpD,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;KAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;KAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAErC,+FAA+F;AAC/F,SAAS,WAAW,CAClB,GAAgB,EAChB,MAAc;IAEd,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,WAAW,IAAI,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAkB,EAAE;IAC/C,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC,CAAC;AAcF,0FAA0F;AAC1F,SAAS,WAAW,CAAC,GAAkB,EAAE,KAAa;IACpD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,MAAM;YACX,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,mEAAmE,MAAM,SAAS,EAAE;YAC7H,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,6EAA6E,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,CAAC,GAAG,+DAA+D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,8CAA8C,GAAG,KAAK,EAAE,CAAC;IAChG,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,0CAA0C,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1H,CAAC;IACD,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;IACpF,OAAO,aAAa;QAClB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,iDAAiD,GAAG,eAAe,aAAa,SAAS,EAAE;QAC3I,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,0BAA0B,GAAG,2CAA2C,EAAE,CAAC;AACzG,CAAC;AAiBD,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAW,EAAE,CACnD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,eAAe,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEjF,2DAA2D;AAC3D,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,MAAM,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3G,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,MAAc,EACd,MAAc,EACd,QAAgB,EAChB,GAAW,EACX,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,KAAa;IAEb,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ;YACxE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,qEAAqE,EAAE;SACxG,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,MAAM,GACV,GAAG,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,iEAAiE,EAAE;QAC7F,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,cAAc,CAAC,IAAsB,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,2CAA2C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,oDAAoD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;YAClF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACzF,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,CAAC,uCAAuC;QAClF,IAAI,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,SAAS,CAC3B,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAC/D,iBAAiB,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY,KAAK,GAAG,CAAC,EAAE,EAAE,iBAAiB,EAAE,KAAK,CACjF,CAAC;QACF,IAAI,WAAW;YAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAsB,EAAE,KAAa;IACxD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO;QACpB,MAAM,WAAW,GAAG,SAAS,CAC3B,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAC7D,eAAe,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY,KAAK,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,CAC7E,CAAC;QACF,IAAI,WAAW;YAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,KAAwB,EAAE,KAAa,EAAE,IAAI,GAAG,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,kBAAkB,OAAO,GAAG,CAAC,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAsB,EAAE,KAAe;IAC/D,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,uEAAuE,CAAC,CAAC;QAChG,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAA2F,CAAC;IACnH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE;YACjF,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,uBAAuB,IAAI,GAAG;YAClF,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE;YACjF,MAAM,EAAE,+BAA+B,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,+BAA+B,IAAI,GAAG;YAClG,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE;gBAC/C,CAAC,CAAC,MAAM;oBACN,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,wCAAwC,EAAE;oBACxG,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,4CAA4C,QAAQ,KAAK,EAAE;SAC1F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAsB;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,CAAC;YACN,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;YACrE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,kBAAkB;YAC3E,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE;gBAC/C,CAAC,CAAC,MAAM;oBACN,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,wCAAwC,EAAE;oBACxG,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,gDAAgD,GAAG,KAAK,EAAE;SACzF,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,YAAY,CAAC;IACjH,IAAI,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,aAAa,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;gBACtB,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE;aAC1F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAiB,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2CAA2C;AAC3C,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,CAAC,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IAChH,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED,0EAA0E;AAC1E,SAAS,IAAI,CAAC,CAAU,EAAE,QAAgB;IACxC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,GAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,KAAK,GAAG;YACN,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,KAAK,GAAG;YACN,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,KAAK,IAAI,CAAC;QAAC,KAAK,GAAG,CAAC;QAAC,KAAK,GAAG,CAAC;QAAC,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI;YACjD,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC;YACE,mEAAmE;YACnE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC;gBAClB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAU,EAAE,KAAyC;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC/B,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE;QAChC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChI,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,KAAyC,EAAW,EAAE;IAC3F,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC,CAAC;AAYF,MAAM,WAAW,GAAG,+HAA+H,CAAC;AAEpJ,SAAS,YAAY,CAAC,CAAc,EAAE,CAAU,EAAE,UAAmB,EAAE,KAAa;IAClF,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;YAC3D,MAAM,EAAE,OAAO,OAAO,YAAY,MAAM,0CAA0C,YAAY,CAAC,iBAAiB,CAAC,iCAAiC;SACnJ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3F,CAAC,CAAC,EAAmF,EAAE,CACrF,CAAC,CAAC,OAAO,KAAK,IAAI;QAClB,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAC1F,CAAC;IACF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CACR,SAAS,IAAI,OAAO;YAClB,CAAC,CAAC,OAAO,OAAO,kBAAkB,OAAO,CAAC,OAAO,4BAA4B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;gBAClG,KAAK,GAAG,CAAC,IAAI,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,MAAM,gBAAgB,OAAO,CAAC,OAAO,YAAY;YAC7G,CAAC,CAAC,OAAO,OAAO,mBAAmB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK;gBACzG,GAAG,GAAG,CAAC,MAAM,iBAAiB,MAAM,+EAA+E,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,KAAK;YACV,CAAC,CAAC,UAAU,MAAM,oCAAoC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,iBAAiB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC1K,CAAC,CAAC,UAAU,MAAM,8DAA8D,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;YAC3D,MAAM,EACJ,OAAO,OAAO,0CAA0C;gBACxD,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,4BAA4B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,KAAK;QACnB,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO;YAC1B,CAAC,CAAC,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,oBAAoB,KAAK,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,CAAC,OAAO,CAAC,OAAO,SAAS;YACvG,CAAC,CAAC,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,qDAAqD,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM;QACxG,CAAC,CAAC,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,mCAAmC,CAAC;IACnE,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;QAC/C,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QAC9C,OAAO;QACP,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,iBAAiB,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE;QAClF,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,OAAO,kBAAkB;KACnI,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,MAAc,EAAE,GAAW,EAAE,KAAa;IAC/E,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;YAC3D,MAAM,EAAE,OAAO,MAAM,wCAAwC,YAAY,CAAC,iBAAiB,CAAC,iCAAiC;SAC9H,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,8EAA8E;QAC9E,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YAChD,GAAG,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YAC/C,OAAO,EAAE,OAAO,MAAM,KAAK,CAAC,CAAC,MAAM,sBAAsB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kCAAkC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACzI,SAAS,EACP,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,IAAI,QAAQ,GAAG,YAAY,MAAM,6BAA6B,KAAK,EAAE;gBAChG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;oBACf,CAAC,CAAC,qBAAqB,MAAM,qBAAqB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACtI,CAAC,CAAC,GAAG,CAAC;gBACR,gCAAgC,iBAAiB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE;YAC1G,MAAM,EAAE,OAAO,MAAM,kBAAkB;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,OAAO,IAAI,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;YAC3D,MAAM,EAAE,OAAO,MAAM,uCAAuC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACzF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,aAAa,MAAM,EAAE,GAAG,CAAC,IAAI,4BAA4B,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE;QACnI,SAAS,EACP,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,IAAI,QAAQ,GAAG,gEAAgE;YAC1G,sCAAsC;YACtC,KAAK;iBACF,GAAG,CACF,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CACnB,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,aAAa,OAAO,aAAa;gBAC/H,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,gDAAgD,CACjF;iBACA,IAAI,CAAC,GAAG,CAAC;YACZ,iDAAiD,MAAM,EAAE,OAAO,eAAe,WAAW,EAAE;QAC9F,MAAM,EAAE,OAAO,MAAM,wBAAwB,MAAM,EAAE,GAAG,CAAC,IAAI,4BAA4B,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE;KACrI,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAc,EAAE,KAAa,EAAE,KAAa;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,KAAK,gCAAgC,EAAE,CAAC;IAC7H,CAAC;IACD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClG,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;YAC3D,MAAM,EACJ,gBAAgB,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,KAAK,KAAK,kCAAkC,gBAAgB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;gBACnI,CAAC,CAAC,KAAK,KAAK,oDAAoD;SACrE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACtG,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,8EAA8E,KAAK,KAAK;QACjG,SAAS,EACP,GAAG,CAAC,CAAC,KAAK,mBAAmB,KAAK,0EAA0E;YAC5G,aAAa,MAAM,0BAA0B,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG;YACxI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACf,CAAC,CAAC,gDAAgD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACzH,CAAC,CAAC,EAAE,CAAC;YACP,+HAA+H;QACjI,MAAM,EAAE,KAAK,KAAK,kCAAkC;KACrD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB,CAClC,KAAkC,EAClC,OAA4B;IAE5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,IAAI,KAAK,YAAY;YAAE,YAAY,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;aAChF,IAAI,IAAI,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;aAC/E,IAAI,IAAI,KAAK,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;aAC7E,IAAI,IAAI,KAAK,aAAa;YAAE,YAAY,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,OAAO,GACX,CAAC,CAAC,KAAK,KAAK,SAAS;YACnB,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;YACzC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO;gBAC1B,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC;gBACvE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ;oBAC3B,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;oBAChE,CAAC,CAAC,IAAI,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,IAAI;YAChB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,wBAAwB,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE;SAChH,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,QAAQ;YAAE,SAAS;QACjC,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAa,CAAC,UAAU;YACpC,CAAC,CAAC,OAAO,CAAC,QAAQ;YAClB,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxG,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CACX,gBAAgB,CAAC;YACf,MAAM,EAAE,oBAAoB,CAAC,EAAE;YAC/B,QAAQ,EAAE,oBAAoB,CAAC,IAAI;YACnC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,oBAAoB,CAAC,KAAK;YACjC,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,IAAI;gBACjB,WAAW,EAAE,CAAC,CAAC,MAAM;gBACrB,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,SAAS,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM;gBACnC,WAAW,EAAE,CAAC,CAAC,QAAQ;gBACvB,WAAW,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE;gBAC1B,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO;aACtE;YACD,SAAS,EACP,GAAG,OAAO,CAAC,SAAS,gCAAgC,YAAY,CAAC,iBAAiB,CAAC,GAAG;gBACtF,CAAC,UAAU;oBACT,CAAC,CAAC,4FAA4F;wBAC5F,6FAA6F;wBAC7F,sBAAsB;oBACxB,CAAC,CAAC,EAAE,CAAC;YACT,WAAW,EAAE,oBAAoB,CAAC,WAAW;SAC9C,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CACR,sGAAsG;gBACpG,6GAA6G,CAChH,CAAC;QACJ,CAAC;aAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,IAAI,CACR,wGAAwG;gBACtG,uCAAuC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,0CAA0C,GAAG,2BAA2B,YAAY,CAAC,iBAAiB,CAAC,KAAK;YAC1G,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AACxE,CAAC"}