@spine-event-engine/auth 2.0.0-snapshot.2

package/dist/sessions/signed.js

@@ -0,0 +1,534 @@
+/*
+ * Copyright 2026, CodeMatters. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+import { create } from "@bufbuild/protobuf";
+import { KeyObject, createPrivateKey, createPublicKey, randomBytes as nodeRandomBytes, sign, verify, } from "node:crypto";
+import { TimestampSchema } from "@bufbuild/protobuf/wkt";
+/**
+ * Finite, local ES256/JWT application sessions. This class has no remote key
+ * discovery, persistence, OIDC behavior, or authorization policy. It imports
+ * owned key copies, but Node does not expose explicit `KeyObject` zeroing.
+ */
+export class SignedSessions {
+    #issuer;
+    #audience;
+    #clock;
+    #random;
+    #ttl;
+    #skew;
+    #maxToken;
+    #maxKeys;
+    #maxId;
+    #maxAttributes;
+    #maxAttributeChars;
+    #active;
+    #keys = new Map();
+    #revocation;
+    #closed = false;
+    /**
+     * Creates signed sessions with copied finite configuration and P-256 keys.
+     * @param options The issuer, key ring, limits, clock, entropy, and revocation settings.
+     */
+    constructor(options) {
+        this.#issuer = SignedSessionValues.boundedString(options.issuer, "issuer");
+        this.#audience = SignedSessionValues.boundedString(options.audience, "audience");
+        this.#ttl = SignedSessionValues.positive(options.ttlSeconds ?? 28_800, "ttlSeconds");
+        this.#skew = SignedSessionValues.nonnegative(options.clockSkewSeconds ?? 60, "clockSkewSeconds");
+        this.#maxToken = SignedSessionValues.positive(options.maxTokenCharacters ?? 8_192, "maxTokenCharacters");
+        this.#maxKeys = SignedSessionValues.positive(options.maxKeys ?? 16, "maxKeys");
+        this.#maxId = SignedSessionValues.positive(options.maxPrincipalIdCharacters ?? 256, "maxPrincipalIdCharacters");
+        this.#maxAttributes = SignedSessionValues.nonnegative(options.maxAttributes ?? 32, "maxAttributes");
+        this.#maxAttributeChars = SignedSessionValues.nonnegative(options.maxAttributeCharacters ?? 4_096, "maxAttributeCharacters");
+        this.#clock = options.clock ?? { now: Date.now };
+        this.#random = options.randomBytes ?? nodeRandomBytes;
+        this.#revocation = options.revocation;
+        if ((options.retiredKeys?.length ?? 0) + 1 > this.#maxKeys)
+            throw new Error("maxKeys exceeded");
+        const retainedUntil = options.retiredKeys === undefined || options.retiredKeys.length === 0
+            ? undefined
+            : SignedSessionValues.retentionDeadline(SignedSessionValues.clockValue(this.#clock), this.#ttl, this.#skew);
+        this.#active = SignedSessionValues.signing(options.activeKey);
+        this.#keys.set(this.#active.kid, { publicKey: this.#active.publicKey });
+        for (const key of options.retiredKeys ?? []) {
+            const copied = SignedSessionValues.verification(key);
+            if (this.#keys.has(copied.kid))
+                throw new Error("duplicate kid");
+            this.#keys.set(copied.kid, retainedUntil === undefined
+                ? { publicKey: copied.publicKey }
+                : { publicKey: copied.publicKey, expiresAt: retainedUntil });
+        }
+    }
+    /**
+     * Creates one compact ES256 bearer token inside configured identity bounds.
+     * @param principal The authenticated principal to encode.
+     * @returns The issuance outcome and, when accepted, credential and session.
+     */
+    issue(principal) {
+        if (this.#isClosed())
+            return Promise.resolve(SignedSessionValues.rejected("closed"));
+        const now = this.#now();
+        if (typeof now !== "number")
+            return Promise.resolve(SignedSessionValues.rejected(now.kind === "closed" ? "closed" : "clock-failure"));
+        if (this.#isClosed())
+            return Promise.resolve(SignedSessionValues.rejected("closed"));
+        this.#sweep(now);
+        let copied;
+        try {
+            copied = SignedSessionValues.principalCopy(principal, this.#maxId, this.#maxAttributes, this.#maxAttributeChars);
+        }
+        catch {
+            return Promise.resolve(SignedSessionValues.rejected("principal-invalid"));
+        }
+        if (copied === undefined)
+            return Promise.resolve(SignedSessionValues.rejected("principal-invalid"));
+        const jti = this.#jti();
+        if (jti === undefined)
+            return Promise.resolve(this.#isClosed()
+                ? SignedSessionValues.rejected("closed")
+                : SignedSessionValues.rejected("entropy-failure"));
+        if (this.#isClosed())
+            return Promise.resolve(SignedSessionValues.rejected("closed"));
+        const again = this.#now();
+        if (typeof again !== "number")
+            return Promise.resolve(SignedSessionValues.rejected(again.kind === "closed" ? "closed" : "clock-failure"));
+        if (this.#isClosed())
+            return Promise.resolve(SignedSessionValues.rejected("closed"));
+        const iat = Math.floor(again / 1000);
+        const exp = iat + this.#ttl;
+        if (!Number.isSafeInteger(exp) || !SignedSessionValues.timeValid(exp * 1000))
+            return Promise.resolve(SignedSessionValues.rejected("clock-failure"));
+        const claims = {
+            iss: this.#issuer,
+            aud: this.#audience,
+            sub: copied.id,
+            iat,
+            nbf: iat,
+            exp,
+            jti,
+            ...(copied.attributes === undefined ? {} : { attributes: copied.attributes }),
+        };
+        try {
+            const token = this.#token(claims);
+            if (token.length > this.#maxToken)
+                return Promise.resolve(SignedSessionValues.rejected("signing-failure"));
+            if (this.#isClosed())
+                return Promise.resolve(SignedSessionValues.rejected("closed"));
+            return Promise.resolve({
+                kind: "issued",
+                credential: Object.freeze({ kind: "bearer", value: token }),
+                session: SignedSessionValues.session(copied, exp),
+            });
+        }
+        catch {
+            return Promise.resolve(SignedSessionValues.rejected("signing-failure"));
+        }
+    }
+    /**
+     * Resolves one locally verifiable bearer credential.
+     *
+     * Cookie credentials and every malformed, invalid, expired, revoked, or
+     * unavailable-revocation result return `undefined`.
+     * @param credential The credential to resolve.
+     * @returns The verified session, or undefined when it cannot be trusted.
+     */
+    async resolve(credential) {
+        if (this.#isClosed() || credential.kind !== "bearer")
+            return undefined;
+        const claims = this.#verifiedClaims(credential.value);
+        if (claims === undefined)
+            return undefined;
+        if (this.#revocation !== undefined)
+            try {
+                if (await this.#revocation.isRevoked(claims.jti))
+                    return undefined;
+            }
+            catch {
+                return undefined;
+            }
+        if (this.#isClosed())
+            return undefined;
+        return SignedSessionValues.session({
+            id: claims.sub,
+            ...(claims.attributes === undefined ? {} : { attributes: claims.attributes }),
+        }, claims.exp);
+    }
+    /**
+     * Updates the active P-256 key atomically.
+     *
+     * The previous verifier remains through the configured token lifetime plus
+     * clock skew, subject to the finite key bound.
+     * @param next The next active signing key.
+     * @returns The rotation outcome.
+     */
+    rotate(next) {
+        if (this.#isClosed())
+            return Promise.resolve(SignedSessionValues.rotation("closed"));
+        const now = this.#now();
+        if (typeof now !== "number")
+            return Promise.resolve(SignedSessionValues.rotation(now.kind === "closed" ? "closed" : "clock-failure"));
+        if (this.#isClosed())
+            return Promise.resolve(SignedSessionValues.rotation("closed"));
+        this.#sweep(now);
+        let copy;
+        try {
+            copy = SignedSessionValues.signing(next);
+        }
+        catch {
+            return Promise.resolve(SignedSessionValues.rotation("invalid-key"));
+        }
+        if (this.#keys.has(copy.kid))
+            return Promise.resolve(SignedSessionValues.rotation("duplicate-key"));
+        if (this.#keys.size + 1 > this.#maxKeys)
+            return Promise.resolve(SignedSessionValues.rotation("key-capacity-exceeded"));
+        const again = this.#now();
+        if (typeof again !== "number")
+            return Promise.resolve(SignedSessionValues.rotation(again.kind === "closed" ? "closed" : "clock-failure"));
+        if (this.#isClosed())
+            return Promise.resolve(SignedSessionValues.rotation("closed"));
+        let expiresAt;
+        try {
+            expiresAt = SignedSessionValues.retentionDeadline(again, this.#ttl, this.#skew);
+        }
+        catch {
+            return Promise.resolve(SignedSessionValues.rotation("clock-failure"));
+        }
+        const active = this.#active;
+        if (active === undefined)
+            return Promise.resolve(SignedSessionValues.rotation("closed"));
+        this.#keys.set(active.kid, {
+            publicKey: active.publicKey,
+            expiresAt,
+        });
+        this.#active = copy;
+        this.#keys.set(copy.kid, { publicKey: copy.publicKey });
+        return Promise.resolve({ kind: "rotated" });
+    }
+    /**
+     * Sends a logout request without revealing invalid-token state.
+     *
+     * Immediate revocation requires `SignedTokenRevocation`; otherwise valid and
+     * invalid input both report `expiryOnly`.
+     * @param credential The credential to revoke when valid.
+     * @returns The enumeration-safe logout outcome.
+     */
+    async logout(credential) {
+        const resolved = await this.#claimsForLogout(credential);
+        if (resolved === undefined)
+            return { kind: "expiryOnly" };
+        if (this.#revocation === undefined)
+            return { kind: "expiryOnly" };
+        try {
+            await this.#revocation.revoke(resolved.jti, SignedSessionValues.timestamp(resolved.exp));
+            return this.#closed ? { kind: "expiryOnly" } : { kind: "revoked" };
+        }
+        catch {
+            return this.#closed ? { kind: "expiryOnly" } : { kind: "unavailable" };
+        }
+    }
+    /**
+     * Closes the resolver and clears active, verification-key, and revocation references.
+     * Node `KeyObject` memory cannot be explicitly zeroed.
+     * @returns Completes after resolver references are cleared.
+     */
+    close() {
+        this.#closed = true;
+        this.#keys.clear();
+        this.#active = undefined;
+        this.#revocation = undefined;
+        return Promise.resolve();
+    }
+    #claimsForLogout(credential) {
+        if (credential.kind !== "bearer" || this.#isClosed())
+            return Promise.resolve(undefined);
+        return Promise.resolve(this.#verifiedClaims(credential.value));
+    }
+    #verifiedClaims(value) {
+        const parsed = this.#parse(value);
+        if (parsed === undefined)
+            return undefined;
+        const now = this.#now();
+        if (typeof now !== "number" || this.#isClosed())
+            return undefined;
+        this.#sweep(now);
+        const key = this.#keys.get(parsed.kid);
+        if (key === undefined || (key.expiresAt !== undefined && now > key.expiresAt))
+            return undefined;
+        try {
+            if (!verify("sha256", Buffer.from(parsed.input), { key: key.publicKey, dsaEncoding: "ieee-p1363" }, parsed.signature))
+                return undefined;
+        }
+        catch {
+            return undefined;
+        }
+        return SignedSessionValues.validClaims(parsed.claims, this.#issuer, this.#audience, this.#ttl, this.#skew, now, this.#maxId, this.#maxAttributes, this.#maxAttributeChars);
+    }
+    #token(claims) {
+        const active = this.#active;
+        if (active === undefined)
+            throw new Error("SignedSessions is closed");
+        const header = SignedSessionValues.encode({ alg: "ES256", typ: "JWT", kid: active.kid });
+        const payload = SignedSessionValues.encode(claims);
+        const input = `${header}.${payload}`;
+        const signature = sign("sha256", Buffer.from(input), {
+            key: active.privateKey,
+            dsaEncoding: "ieee-p1363",
+        });
+        if (signature.byteLength !== 64)
+            throw new Error("invalid ES256 signature");
+        return `${input}.${Buffer.from(signature).toString("base64url")}`;
+    }
+    #jti() {
+        let bytes;
+        try {
+            bytes = this.#random(16);
+            if (bytes.byteLength !== 16)
+                return undefined;
+            return Buffer.from(bytes).toString("base64url");
+        }
+        catch {
+            return undefined;
+        }
+        finally {
+            bytes?.fill(0);
+        }
+    }
+    #now() {
+        try {
+            const value = this.#clock.now();
+            if (!Number.isSafeInteger(value) || !SignedSessionValues.timeValid(value))
+                throw new Error();
+            return value;
+        }
+        catch {
+            if (this.#isClosed())
+                return { kind: "closed" };
+            void this.close();
+            return { kind: "failure" };
+        }
+    }
+    #isClosed() {
+        return this.#closed;
+    }
+    #sweep(now) {
+        for (const [kid, key] of this.#keys)
+            if (key.expiresAt !== undefined && now > key.expiresAt)
+                this.#keys.delete(kid);
+    }
+    #parse(value) {
+        if (typeof value !== "string" || value.length === 0 || value.length > this.#maxToken)
+            return undefined;
+        const segments = value.split(".");
+        if (segments.length !== 3 ||
+            segments.some((segment) => !SignedSessionValues.base64url(segment)))
+            return undefined;
+        const [encodedHeader, encodedClaims, encodedSignature] = segments;
+        try {
+            const header = SignedSessionValues.json(encodedHeader);
+            if (!SignedSessionValues.plain(header) ||
+                header.alg !== "ES256" ||
+                header.typ !== "JWT" ||
+                typeof header.kid !== "string" ||
+                Object.keys(header).length !== 3 ||
+                !SignedSessionValues.validKid(header.kid))
+                return undefined;
+            const signature = Buffer.from(encodedSignature, "base64url");
+            if (signature.byteLength !== 64 || signature.toString("base64url") !== encodedSignature)
+                return undefined;
+            return {
+                kid: header.kid,
+                input: `${encodedHeader}.${encodedClaims}`,
+                signature,
+                claims: SignedSessionValues.json(encodedClaims),
+            };
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+/**
+ * Validates, serializes, and constructs finite signed-session values.
+ */
+const SignedSessionValues = Object.freeze({
+    rejected(reason) {
+        return { kind: "rejected", reason };
+    },
+    rotation(reason) {
+        return { kind: "rejected", reason };
+    },
+    signing(key) {
+        const kid = SignedSessionValues.boundedString(key.kid, "kid");
+        if (key.privateKey.type !== "private" ||
+            key.privateKey.asymmetricKeyType !== "ec" ||
+            key.privateKey.asymmetricKeyDetails?.namedCurve !== "prime256v1")
+            throw new Error("P-256 private key required");
+        const der = key.privateKey.export({ type: "pkcs8", format: "der" });
+        let privateKey;
+        try {
+            privateKey = createPrivateKey({ key: der, type: "pkcs8", format: "der" });
+        }
+        finally {
+            der.fill(0);
+        }
+        const publicKey = createPublicKey(privateKey);
+        return { kid, privateKey, publicKey };
+    },
+    verification(key) {
+        const kid = SignedSessionValues.boundedString(key.kid, "kid");
+        if (key.publicKey.type !== "public" ||
+            key.publicKey.asymmetricKeyType !== "ec" ||
+            key.publicKey.asymmetricKeyDetails?.namedCurve !== "prime256v1")
+            throw new Error("P-256 public key required");
+        const der = key.publicKey.export({ type: "spki", format: "der" });
+        try {
+            return { kid, publicKey: createPublicKey({ key: der, type: "spki", format: "der" }) };
+        }
+        finally {
+            der.fill(0);
+        }
+    },
+    positive(value, name) {
+        if (!Number.isSafeInteger(value) || value <= 0)
+            throw new Error(`${name} must be a positive safe integer`);
+        return value;
+    },
+    nonnegative(value, name) {
+        if (!Number.isSafeInteger(value) || value < 0)
+            throw new Error(`${name} must be a non-negative safe integer`);
+        return value;
+    },
+    boundedString(value, name) {
+        if (typeof value !== "string" || value.length === 0 || value.length > 256)
+            throw new Error(`${name} must be a non-empty string of at most 256 characters`);
+        return value;
+    },
+    validKid(value) {
+        return value.length > 0 && value.length <= 256;
+    },
+    base64url(value) {
+        return value.length > 0 && /^[A-Za-z0-9_-]+$/.test(value) && value.length % 4 !== 1;
+    },
+    encode(value) {
+        return Buffer.from(JSON.stringify(value)).toString("base64url");
+    },
+    json(value) {
+        const decoded = Buffer.from(value, "base64url");
+        if (decoded.byteLength > 16_384)
+            throw new Error();
+        return JSON.parse(decoded.toString("utf8"));
+    },
+    plain(value) {
+        return (typeof value === "object" &&
+            value !== null &&
+            Object.getPrototypeOf(value) === Object.prototype);
+    },
+    principalCopy(value, maxId, maxAttributes, maxChars) {
+        if (typeof value.id !== "string" || value.id.length === 0 || value.id.length > maxId)
+            return undefined;
+        if (value.attributes === undefined)
+            return Object.freeze({ id: value.id });
+        if (!SignedSessionValues.plain(value.attributes))
+            return undefined;
+        const entries = [];
+        let characters = 0;
+        for (const name in value.attributes) {
+            if (!Object.prototype.hasOwnProperty.call(value.attributes, name))
+                continue;
+            if (entries.length === maxAttributes)
+                return undefined;
+            const attribute = value.attributes[name];
+            if (typeof attribute !== "string")
+                return undefined;
+            characters += name.length + attribute.length;
+            if (characters > maxChars)
+                return undefined;
+            entries.push([name, attribute]);
+        }
+        return Object.freeze({
+            id: value.id,
+            attributes: Object.freeze(Object.fromEntries(entries)),
+        });
+    },
+    validClaims(value, issuer, audience, ttl, skew, now, maxId, maxAttributes, maxChars) {
+        if (!SignedSessionValues.plain(value) ||
+            Object.keys(value).some((key) => !["iss", "aud", "sub", "iat", "nbf", "exp", "jti", "attributes"].includes(key)))
+            return undefined;
+        const { iss, aud, sub, iat, nbf, exp, jti, attributes } = value;
+        if (iss !== issuer ||
+            aud !== audience ||
+            typeof iat !== "number" ||
+            typeof nbf !== "number" ||
+            typeof exp !== "number" ||
+            typeof jti !== "string" ||
+            ![iat, nbf, exp].every(Number.isSafeInteger) ||
+            exp <= nbf ||
+            nbf < iat ||
+            exp - iat > ttl ||
+            nbf * 1000 > now + skew * 1000 ||
+            exp * 1000 < now - skew * 1000 ||
+            !SignedSessionValues.validJti(jti))
+            return undefined;
+        const principal = SignedSessionValues.principalCopy({
+            id: sub,
+            ...(attributes === undefined ? {} : { attributes: attributes }),
+        }, maxId, maxAttributes, maxChars);
+        if (!principal)
+            return undefined;
+        return {
+            iss,
+            aud,
+            sub: principal.id,
+            iat,
+            nbf,
+            exp,
+            jti,
+            ...(principal.attributes === undefined ? {} : { attributes: principal.attributes }),
+        };
+    },
+    timestamp(seconds) {
+        return create(TimestampSchema, { seconds: BigInt(seconds) });
+    },
+    session(principal, seconds) {
+        const copied = SignedSessionValues.principalCopy(principal, Number.MAX_SAFE_INTEGER, Number.MAX_SAFE_INTEGER, Number.MAX_SAFE_INTEGER);
+        if (copied === undefined)
+            throw new Error("invalid principal");
+        return Object.freeze({
+            principal: copied,
+            expiresAt: SignedSessionValues.timestamp(seconds),
+        });
+    },
+    timeValid(milliseconds) {
+        const seconds = Math.floor(milliseconds / 1000);
+        return seconds >= -62_135_596_800 && seconds <= 253_402_300_799;
+    },
+    validJti(value) {
+        return value.length === 22 && SignedSessionValues.base64url(value);
+    },
+    clockValue(clock) {
+        const value = clock.now();
+        if (!Number.isSafeInteger(value) || !SignedSessionValues.timeValid(value))
+            throw new Error("invalid clock");
+        return value;
+    },
+    retentionDeadline(now, ttl, skew) {
+        const seconds = ttl + skew;
+        const milliseconds = seconds * 1_000;
+        const deadline = now + milliseconds;
+        if (!Number.isSafeInteger(seconds) ||
+            !Number.isSafeInteger(milliseconds) ||
+            !SignedSessionValues.timeValid(deadline))
+            throw new Error("retention deadline exceeds Timestamp range");
+        return deadline;
+    },
+});
+//# sourceMappingURL=signed.js.map

package/dist/sessions/signed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed.js","sourceRoot":"","sources":["../../src/sessions/signed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,WAAW,IAAI,eAAe,EAC9B,IAAI,EACJ,MAAM,GACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAkB,MAAM,wBAAwB,CAAC;AAsRzE;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAChB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,MAAM,CAAqB;IAC3B,OAAO,CAAsB;IAC7B,IAAI,CAAS;IACb,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,cAAc,CAAS;IACvB,kBAAkB,CAAS;IACpC,OAAO,CAA+B;IACtC,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC3C,WAAW,CAAoC;IAC/C,OAAO,GAAG,KAAK,CAAC;IAEhB;;;OAGG;IACH,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,EAAE,YAAY,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC,WAAW,CAC1C,OAAO,CAAC,gBAAgB,IAAI,EAAE,EAC9B,kBAAkB,CACnB,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAC3C,OAAO,CAAC,kBAAkB,IAAI,KAAK,EACnC,oBAAoB,CACrB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CACxC,OAAO,CAAC,wBAAwB,IAAI,GAAG,EACvC,0BAA0B,CAC3B,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,mBAAmB,CAAC,WAAW,CACnD,OAAO,CAAC,aAAa,IAAI,EAAE,EAC3B,eAAe,CAChB,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,mBAAmB,CAAC,WAAW,CACvD,OAAO,CAAC,sBAAsB,IAAI,KAAK,EACvC,wBAAwB,CACzB,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChG,MAAM,aAAa,GACjB,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YACnE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CACnC,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAC3C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,CACX,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACxE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,MAAM,CAAC,GAAG,EACV,aAAa,KAAK,SAAS;gBACzB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;gBACjC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAiC;QACrC,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ;YACzB,OAAO,OAAO,CAAC,OAAO,CACpB,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CACjF,CAAC;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,MAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,mBAAmB,CAAC,aAAa,CACxC,SAAS,EACT,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,kBAAkB,CACxB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,GAAG,KAAK,SAAS;YACnB,OAAO,OAAO,CAAC,OAAO,CACpB,IAAI,CAAC,SAAS,EAAE;gBACd,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACpD,CAAC;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3B,OAAO,OAAO,CAAC,OAAO,CACpB,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CACnF,CAAC;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC;YAC1E,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAW;YACrB,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,GAAG,EAAE,IAAI,CAAC,SAAS;YACnB,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,GAAG;YACH,GAAG,EAAE,GAAG;YACR,GAAG;YACH,GAAG;YACH,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;SAC9E,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;gBAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC1E,IAAI,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrF,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC3D,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,UAA6B;QACzC,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAChC,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;oBAAE,OAAO,SAAS,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,SAAS,CAAC;QACvC,OAAO,mBAAmB,CAAC,OAAO,CAChC;YACE,EAAE,EAAE,MAAM,CAAC,GAAG;YACd,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;SAC9E,EACD,MAAM,CAAC,GAAG,CACX,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,IAA6B;QAClC,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ;YACzB,OAAO,OAAO,CAAC,OAAO,CACpB,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CACjF,CAAC;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,IAAkE,CAAC;QACvE,IAAI,CAAC;YACH,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ;YACrC,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3B,OAAO,OAAO,CAAC,OAAO,CACpB,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CACnF,CAAC;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrF,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,UAA6B;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,gBAAgB,CAAC,UAA6B;QAC5C,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxF,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,eAAe,CAAC,KAAa;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,SAAS,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAChG,IAAI,CAAC;YACH,IACE,CAAC,MAAM,CACL,QAAQ,EACR,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EACzB,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,EACjD,MAAM,CAAC,SAAS,CACjB;gBAED,OAAO,SAAS,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,mBAAmB,CAAC,WAAW,CACpC,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,EACV,GAAG,EACH,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,kBAAkB,CACxB,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,MAAc;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACnD,GAAG,EAAE,MAAM,CAAC,UAAU;YACtB,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,UAAU,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC5E,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI;QACF,IAAI,KAA6B,CAAC;QAClC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI;QACF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC7F,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAChD,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACD,MAAM,CAAC,GAAW;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK;YACjC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,CACJ,KAAa;QAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;YAClF,OAAO,SAAS,CAAC;QACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEnE,OAAO,SAAS,CAAC;QACnB,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAoC,CAAC;QAC9F,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACvD,IACE,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;gBAClC,MAAM,CAAC,GAAG,KAAK,OAAO;gBACtB,MAAM,CAAC,GAAG,KAAK,KAAK;gBACpB,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;gBAChC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;gBAEzC,OAAO,SAAS,CAAC;YACnB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAC7D,IAAI,SAAS,CAAC,UAAU,KAAK,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,gBAAgB;gBACrF,OAAO,SAAS,CAAC;YACnB,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,GAAG,aAAa,IAAI,aAAa,EAAE;gBAC1C,SAAS;gBACT,MAAM,EAAE,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC;aAChD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,QAAQ,CAAC,MAA4B;QACnC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IACD,QAAQ,CACN,MAA8F;QAE9F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAA4B;QAClC,MAAM,GAAG,GAAG,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,IACE,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;YACjC,GAAG,CAAC,UAAU,CAAC,iBAAiB,KAAK,IAAI;YACzC,GAAG,CAAC,UAAU,CAAC,oBAAoB,EAAE,UAAU,KAAK,YAAY;YAEhE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,IAAI,UAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,UAAU,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC;IACD,YAAY,CAAC,GAAiC;QAC5C,MAAM,GAAG,GAAG,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,IACE,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;YAC/B,GAAG,CAAC,SAAS,CAAC,iBAAiB,KAAK,IAAI;YACxC,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,UAAU,KAAK,YAAY;YAE/D,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,KAAa,EAAE,IAAY;QAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,WAAW,CAAC,KAAa,EAAE,IAAY;QACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,aAAa,CAAC,KAAa,EAAE,IAAY;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YACvE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uDAAuD,CAAC,CAAC;QAClF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,QAAQ,CAAC,KAAa;QACpB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;IACjD,CAAC;IACD,SAAS,CAAC,KAAa;QACrB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,CAAC,KAAc;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAa;QAChB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,UAAU,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,KAAc;QAClB,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAClD,CAAC;IACJ,CAAC;IACD,aAAa,CACX,KAA6B,EAC7B,KAAa,EACb,aAAqB,EACrB,QAAgB;QAEhB,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,KAAK;YAClF,OAAO,SAAS,CAAC;QACnB,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QACnE,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa;gBAAE,OAAO,SAAS,CAAC;YACvD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACpD,UAAU,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;YAC7C,IAAI,UAAU,GAAG,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;SACvD,CAAC,CAAC;IACL,CAAC;IACD,WAAW,CACT,KAAc,EACd,MAAc,EACd,QAAgB,EAChB,GAAW,EACX,IAAY,EACZ,GAAW,EACX,KAAa,EACb,aAAqB,EACrB,QAAgB;QAEhB,IACE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxF;YAED,OAAO,SAAS,CAAC;QACnB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;QAChE,IACE,GAAG,KAAK,MAAM;YACd,GAAG,KAAK,QAAQ;YAChB,OAAO,GAAG,KAAK,QAAQ;YACvB,OAAO,GAAG,KAAK,QAAQ;YACvB,OAAO,GAAG,KAAK,QAAQ;YACvB,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;YAC5C,GAAG,IAAI,GAAG;YACV,GAAG,GAAG,GAAG;YACT,GAAG,GAAG,GAAG,GAAG,GAAG;YACf,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;YAC9B,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;YAC9B,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAElC,OAAO,SAAS,CAAC;QACnB,MAAM,SAAS,GAAG,mBAAmB,CAAC,aAAa,CACjD;YACE,EAAE,EAAE,GAAa;YACjB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAoC,EAAE,CAAC;SAC1F,EACD,KAAK,EACL,aAAa,EACb,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,OAAO;YACL,GAAG;YACH,GAAG;YACH,GAAG,EAAE,SAAS,CAAC,EAAE;YACjB,GAAG;YACH,GAAG;YACH,GAAG;YACH,GAAG;YACH,GAAG,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;SACpF,CAAC;IACJ,CAAC;IACD,SAAS,CAAC,OAAe;QACvB,OAAO,MAAM,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,SAAiC,EAAE,OAAe;QACxD,MAAM,MAAM,GAAG,mBAAmB,CAAC,aAAa,CAC9C,SAAS,EACT,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,gBAAgB,CACxB,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,YAAoB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;QAChD,OAAO,OAAO,IAAI,CAAC,cAAc,IAAI,OAAO,IAAI,eAAe,CAAC;IAClE,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAED,UAAU,CAAC,KAAyB;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB,CAAC,GAAW,EAAE,GAAW,EAAE,IAAY;QACtD,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3B,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,GAAG,YAAY,CAAC;QACpC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;YAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC;YACnC,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC;YAExC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC,CAAC"}