@tinyrack/tinyauth-server 0.0.7

package/dist/services/cleanup.service.js

@@ -0,0 +1,605 @@
+import { EmailVerificationEntitySchema } from "../entities/email-verification.entity.js";
+import { JwtKeyEntity, JwtKeyStatus } from "../entities/jwt-key.entity.js";
+import { OAuthCodeEntitySchema } from "../entities/oauth-code.entity.js";
+import { PasswordResetEntitySchema } from "../entities/password-reset.entity.js";
+import { PendingOAuthRegistrationEntitySchema } from "../entities/pending-oauth-registration.entity.js";
+import { RevokedTokenEntitySchema } from "../entities/revoked-token.entity.js";
+import { UserEntity } from "../entities/user.entity.js";
+import { UserConsentEntity } from "../entities/user-consent.entity.js";
+import { UserOAuthEntitySchema } from "../entities/user-oauth.entity.js";
+import { UserPasskeyEntitySchema } from "../entities/user-passkey.entity.js";
+import { UserTermsConsentEntity } from "../entities/user-terms-consent.entity.js";
+import { UserTotpEntitySchema } from "../entities/user-totp.entity.js";
+import { UserTotpRecoveryCodeEntitySchema } from "../entities/user-totp-recovery-code.entity.js";
+import { calculateCutoffDate, formatDuration, parseDurationToMs, } from "../lib/duration.js";
+/**
+ * Cleanup Service
+ *
+ * Centralizes all cleanup/maintenance tasks for the application.
+ * Handles cleanup of:
+ * - Revoked tokens (expired JWT revocations)
+ * - OAuth authorization codes (expired/consumed)
+ * - Email verification tokens (expired)
+ * - Password reset tokens (expired)
+ * - Deleted users (past retention period)
+ * - JWT signing keys (rotation)
+ *
+ * Can be invoked via:
+ * - CLI command: `tinyauth cleanup`
+ * - In-process scheduler adapter
+ */
+export class CleanupService {
+    config;
+    mikro;
+    jwtService;
+    constructor(config, mikro, jwtService) {
+        this.config = config;
+        this.mikro = mikro;
+        this.jwtService = jwtService;
+    }
+    // ---------------------------------------------------------------------------
+    // Revoked Tokens Cleanup
+    // ---------------------------------------------------------------------------
+    /**
+     * Remove expired revoked tokens from the database.
+     *
+     * Revoked tokens can be safely deleted after their original expiration time
+     * since they would be invalid anyway due to JWT expiration.
+     * The retention period allows keeping expired tokens for a while longer
+     * for debugging purposes. Default is "0" (immediate cleanup after expiry).
+     *
+     * @param options - Cleanup options (dryRun)
+     * @returns Cleanup result with deleted count and details
+     */
+    async cleanupRevokedTokens(options) {
+        const config = this.config.cleanup.revoked_tokens;
+        if (!config.enabled) {
+            return { deletedCount: 0, skipped: true, message: 'Disabled in config' };
+        }
+        const em = this.mikro.orm.em.fork();
+        const revokedTokenRepo = em.getRepository(RevokedTokenEntitySchema);
+        const retentionMs = parseDurationToMs(config.retention);
+        const cutoffDate = calculateCutoffDate(config.retention);
+        // Find tokens that expired before the cutoff date
+        const expiredTokens = await revokedTokenRepo.find({
+            expires_at: { $lt: cutoffDate },
+        });
+        const count = expiredTokens.length;
+        if (count === 0) {
+            return { deletedCount: 0, skipped: false, message: 'No expired tokens' };
+        }
+        if (options.dryRun) {
+            return {
+                deletedCount: count,
+                skipped: false,
+                message: `Would delete ${count} tokens (retention: ${formatDuration(retentionMs)})`,
+            };
+        }
+        // Delete the tokens using nativeDelete for reliable removal
+        const tokenIds = expiredTokens.map((token) => token.id);
+        await em.nativeDelete(RevokedTokenEntitySchema, { id: { $in: tokenIds } });
+        if (retentionMs > 0) {
+            return {
+                deletedCount: count,
+                skipped: false,
+                message: `Retention: ${formatDuration(retentionMs)}`,
+            };
+        }
+        return {
+            deletedCount: count,
+            skipped: false,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // OAuth Codes Cleanup
+    // ---------------------------------------------------------------------------
+    /**
+     * Remove expired and consumed OAuth authorization codes.
+     *
+     * Authorization codes have a short lifetime (typically 10 minutes)
+     * and should be cleaned up regularly to prevent database bloat.
+     * Also cleans up consumed codes after the configured retention period.
+     *
+     * @param options - Cleanup options (dryRun)
+     * @returns Cleanup result with deleted count and details
+     */
+    async cleanupOAuthCodes(options) {
+        const config = this.config.cleanup.oauth_codes;
+        if (!config.enabled) {
+            return { deletedCount: 0, skipped: true, message: 'Disabled in config' };
+        }
+        const em = this.mikro.orm.em.fork();
+        const oauthCodeRepo = em.getRepository(OAuthCodeEntitySchema);
+        const now = new Date();
+        const consumedRetentionMs = parseDurationToMs(config.consumed_retention);
+        const consumedCutoffDate = calculateCutoffDate(config.consumed_retention);
+        // Find expired authorization codes
+        const expiredCodes = await oauthCodeRepo.find({
+            expiredAt: { $lt: now },
+        });
+        // Find consumed codes older than retention period
+        const consumedCodes = await oauthCodeRepo.find({
+            consumedAt: { $ne: null, $lt: consumedCutoffDate },
+        });
+        const expiredCount = expiredCodes.length;
+        const consumedCount = consumedCodes.length;
+        const totalCount = expiredCount + consumedCount;
+        if (totalCount === 0) {
+            return {
+                deletedCount: 0,
+                skipped: false,
+                message: 'No expired or consumed codes',
+            };
+        }
+        if (options.dryRun) {
+            return {
+                deletedCount: totalCount,
+                skipped: false,
+                message: `Would delete ${expiredCount} expired, ${consumedCount} consumed (retention: ${formatDuration(consumedRetentionMs)})`,
+            };
+        }
+        // Delete the codes using nativeDelete for reliable removal
+        const expiredIds = expiredCodes.map((code) => code.id);
+        const consumedIds = consumedCodes.map((code) => code.id);
+        const allIds = [...new Set([...expiredIds, ...consumedIds])];
+        if (allIds.length > 0) {
+            await em.nativeDelete(OAuthCodeEntitySchema, { id: { $in: allIds } });
+        }
+        return {
+            deletedCount: totalCount,
+            skipped: false,
+            message: `${expiredCount} expired, ${consumedCount} consumed`,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Email Verifications Cleanup
+    // ---------------------------------------------------------------------------
+    /**
+     * Remove expired email verification tokens.
+     *
+     * Expired tokens are no longer valid and can be safely deleted.
+     * The retention period allows keeping expired tokens for a while longer
+     * for debugging purposes. Default is "0" (immediate cleanup after expiry).
+     *
+     * @param options - Cleanup options (dryRun)
+     * @returns Cleanup result with deleted count and details
+     */
+    async cleanupEmailVerifications(options) {
+        const config = this.config.cleanup.email_verifications;
+        if (!config.enabled) {
+            return { deletedCount: 0, skipped: true, message: 'Disabled in config' };
+        }
+        const em = this.mikro.orm.em.fork();
+        const emailVerificationRepo = em.getRepository(EmailVerificationEntitySchema);
+        const retentionMs = parseDurationToMs(config.retention);
+        const cutoffDate = calculateCutoffDate(config.retention);
+        // Count expired tokens before the cutoff date
+        const count = await emailVerificationRepo.count({
+            expiresAt: { $lt: cutoffDate },
+            verified: false,
+        });
+        if (count === 0) {
+            return { deletedCount: 0, skipped: false, message: 'No expired tokens' };
+        }
+        if (options.dryRun) {
+            return {
+                deletedCount: count,
+                skipped: false,
+                message: `Would delete ${count} tokens (retention: ${formatDuration(retentionMs)})`,
+            };
+        }
+        // Use native delete for efficiency
+        const deletedCount = await emailVerificationRepo.nativeDelete({
+            expiresAt: { $lt: cutoffDate },
+            verified: false,
+        });
+        if (retentionMs > 0) {
+            return {
+                deletedCount,
+                skipped: false,
+                message: `Retention: ${formatDuration(retentionMs)}`,
+            };
+        }
+        return {
+            deletedCount,
+            skipped: false,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Password Resets Cleanup
+    // ---------------------------------------------------------------------------
+    /**
+     * Remove expired password reset tokens.
+     *
+     * Expired tokens are no longer valid and can be safely deleted.
+     * The retention period allows keeping expired tokens for a while longer
+     * for debugging purposes. Default is "0" (immediate cleanup after expiry).
+     *
+     * @param options - Cleanup options (dryRun)
+     * @returns Cleanup result with deleted count and details
+     */
+    async cleanupPasswordResets(options) {
+        const config = this.config.cleanup.password_resets;
+        if (!config.enabled) {
+            return { deletedCount: 0, skipped: true, message: 'Disabled in config' };
+        }
+        const em = this.mikro.orm.em.fork();
+        const passwordResetRepo = em.getRepository(PasswordResetEntitySchema);
+        const retentionMs = parseDurationToMs(config.retention);
+        const cutoffDate = calculateCutoffDate(config.retention);
+        // Count expired tokens before the cutoff date
+        const count = await passwordResetRepo.count({
+            expiresAt: { $lt: cutoffDate },
+            used: false,
+        });
+        if (count === 0) {
+            return { deletedCount: 0, skipped: false, message: 'No expired tokens' };
+        }
+        if (options.dryRun) {
+            return {
+                deletedCount: count,
+                skipped: false,
+                message: `Would delete ${count} tokens (retention: ${formatDuration(retentionMs)})`,
+            };
+        }
+        // Use native delete for efficiency
+        const deletedCount = await passwordResetRepo.nativeDelete({
+            expiresAt: { $lt: cutoffDate },
+            used: false,
+        });
+        if (retentionMs > 0) {
+            return {
+                deletedCount,
+                skipped: false,
+                message: `Retention: ${formatDuration(retentionMs)}`,
+            };
+        }
+        return {
+            deletedCount,
+            skipped: false,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Deleted Users Cleanup
+    // ---------------------------------------------------------------------------
+    /**
+     * Permanently delete users marked for deletion whose retention period
+     * has expired.
+     *
+     * This is a destructive operation that:
+     * 1. Deletes all user-related data (OAuth accounts, TOTP, passkeys, consents)
+     * 2. Removes the user record permanently
+     *
+     * The retention period is configured in account_deletion.retention
+     * (e.g., "30d", "90d").
+     *
+     * @param options - Cleanup options (dryRun)
+     * @returns Cleanup result with deleted count and details
+     */
+    async cleanupDeletedUsers(options) {
+        const config = this.config.account_deletion;
+        if (!config.enabled) {
+            return {
+                deletedCount: 0,
+                skipped: true,
+                message: 'Account deletion feature is disabled',
+            };
+        }
+        const em = this.mikro.orm.em.fork();
+        const userRepo = em.getRepository(UserEntity);
+        const retentionMs = parseDurationToMs(config.retention);
+        const cutoffDate = calculateCutoffDate(config.retention);
+        // Find users marked for deletion whose retention period has expired
+        const usersToDelete = await userRepo.find({
+            deleted_at: { $ne: null, $lt: cutoffDate },
+            managed_by: 'database', // Only delete database-managed users
+        });
+        if (usersToDelete.length === 0) {
+            return {
+                deletedCount: 0,
+                skipped: false,
+                message: 'No users ready for permanent deletion',
+            };
+        }
+        if (options.dryRun) {
+            return {
+                deletedCount: usersToDelete.length,
+                skipped: false,
+                message: `Would delete ${usersToDelete.length} users (retention: ${formatDuration(retentionMs)})`,
+            };
+        }
+        let deletedCount = 0;
+        const userSubs = usersToDelete.map((user) => user.sub);
+        for (const userSub of userSubs) {
+            try {
+                // Delete related entities first (cascading delete)
+                // Use nativeDelete for reliable removal in MikroORM v7
+                await em.nativeDelete(UserOAuthEntitySchema, { user: userSub });
+                await em.nativeDelete(UserTotpRecoveryCodeEntitySchema, {
+                    user: userSub,
+                });
+                await em.nativeDelete(UserTotpEntitySchema, { user: userSub });
+                await em.nativeDelete(UserPasskeyEntitySchema, { user: userSub });
+                await em.nativeDelete(UserConsentEntity, { user: userSub });
+                await em.nativeDelete(UserTermsConsentEntity, {
+                    user: userSub,
+                });
+                await em.nativeDelete(EmailVerificationEntitySchema, {
+                    user: userSub,
+                });
+                await em.nativeDelete(PasswordResetEntitySchema, { user: userSub });
+                // Finally delete the user
+                await em.nativeDelete(UserEntity, { sub: userSub });
+                deletedCount++;
+            }
+            catch {
+                // Log error but continue with other users
+                // Note: In production, consider adding a logger parameter
+            }
+        }
+        return {
+            deletedCount,
+            skipped: false,
+            message: `Retention: ${formatDuration(retentionMs)}`,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Pending OAuth Registrations Cleanup
+    // ---------------------------------------------------------------------------
+    /**
+     * Remove expired pending OAuth registration records.
+     *
+     * When a new OAuth user needs to accept terms before completing
+     * registration, the OAuth tokens and user info are stored in the
+     * database. These records expire after 1 hour and can be safely
+     * cleaned up afterwards.
+     *
+     * @param options - Cleanup options (dryRun)
+     * @returns Cleanup result with deleted count and details
+     */
+    async cleanupPendingOAuthRegistrations(options) {
+        const config = this.config.cleanup.pending_oauth_registrations;
+        if (!config.enabled) {
+            return { deletedCount: 0, skipped: true, message: 'Disabled in config' };
+        }
+        const em = this.mikro.orm.em.fork();
+        const repo = em.getRepository(PendingOAuthRegistrationEntitySchema);
+        const retentionMs = parseDurationToMs(config.retention);
+        const cutoffDate = calculateCutoffDate(config.retention);
+        const count = await repo.count({
+            expiresAt: { $lt: cutoffDate },
+        });
+        if (count === 0) {
+            return {
+                deletedCount: 0,
+                skipped: false,
+                message: 'No expired pending registrations',
+            };
+        }
+        if (options.dryRun) {
+            return {
+                deletedCount: count,
+                skipped: false,
+                message: `Would delete ${count} pending registrations (retention: ${formatDuration(retentionMs)})`,
+            };
+        }
+        const deletedCount = await repo.nativeDelete({
+            expiresAt: { $lt: cutoffDate },
+        });
+        if (retentionMs > 0) {
+            return {
+                deletedCount,
+                skipped: false,
+                message: `Retention: ${formatDuration(retentionMs)}`,
+            };
+        }
+        return {
+            deletedCount,
+            skipped: false,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // JWT Keys Rotation
+    // ---------------------------------------------------------------------------
+    /**
+     * Rotate expired JWT signing keys and retire old keys.
+     *
+     * This method checks for expired active keys and performs rotation if needed.
+     * Also retires old keys that have passed the overlap period.
+     *
+     * Key lifecycle:
+     * 1. next: Generated, waiting to be activated
+     * 2. active: Currently used for signing tokens
+     * 3. previous: Recently rotated, still valid for verification
+     * 4. retired: No longer valid for any operation
+     *
+     * @param options - Cleanup options (dryRun)
+     * @returns Cleanup result with rotation details
+     */
+    async rotateExpiredJwtKeys(options) {
+        const rotationConfig = this.config.tokens.key_rotation;
+        const rotationEnabled = rotationConfig.enabled;
+        if (!rotationEnabled) {
+            return {
+                deletedCount: 0,
+                skipped: true,
+                message: 'JWT key rotation is disabled',
+            };
+        }
+        // Fork EntityManager for isolation
+        const em = this.mikro.orm.em.fork();
+        // MikroORM's getRepository return type doesn't reflect custom
+        // repository classes registered via entity metadata.
+        const jwtKeyRepo = em.getRepository(JwtKeyEntity);
+        // Check for expired active keys
+        const now = new Date();
+        const expiredKeys = await jwtKeyRepo.find({
+            status: JwtKeyStatus.ACTIVE,
+            expires_at: { $lt: now },
+        });
+        if (options.dryRun) {
+            if (expiredKeys.length > 0) {
+                return {
+                    deletedCount: expiredKeys.length,
+                    skipped: false,
+                    message: `Would rotate ${expiredKeys.length} expired key(s)`,
+                };
+            }
+            return {
+                deletedCount: 0,
+                skipped: false,
+                message: 'No rotation needed',
+            };
+        }
+        if (expiredKeys.length === 0) {
+            return {
+                deletedCount: 0,
+                skipped: false,
+                message: 'No rotation needed',
+            };
+        }
+        // Perform rotation
+        // 1. Deactivate expired active keys -> previous
+        for (const key of expiredKeys) {
+            key.status = JwtKeyStatus.PREVIOUS;
+            key.deactivated_at = new Date();
+        }
+        // 2. Check for next key to promote, or create new one
+        let nextKey = await jwtKeyRepo.findOne({ status: JwtKeyStatus.NEXT }, { populate: ['private_key'] });
+        if (!nextKey) {
+            // Generate new key
+            const keyPair = await this.jwtService.generateKeyPair();
+            const rotationDays = rotationConfig.interval_days;
+            const expiresAt = new Date();
+            expiresAt.setDate(expiresAt.getDate() + rotationDays);
+            nextKey = em.create(JwtKeyEntity, {
+                kid: keyPair.kid,
+                private_key: keyPair.privateKey,
+                public_key: keyPair.publicKey,
+                algorithm: keyPair.algorithm,
+                status: JwtKeyStatus.NEXT,
+                expires_at: expiresAt,
+            });
+        }
+        // 3. Activate the next key
+        nextKey.status = JwtKeyStatus.ACTIVE;
+        nextKey.activated_at = new Date();
+        // 4. Retire old previous keys past overlap period
+        const overlapDays = rotationConfig.overlap_days;
+        const cutoffDate = new Date();
+        cutoffDate.setDate(cutoffDate.getDate() - overlapDays);
+        const keysToRetire = await jwtKeyRepo.find({
+            status: JwtKeyStatus.PREVIOUS,
+            deactivated_at: { $lt: cutoffDate },
+        });
+        for (const key of keysToRetire) {
+            key.status = JwtKeyStatus.RETIRED;
+            key.retired_at = new Date();
+        }
+        await em.flush();
+        // Clear JWT service cache after rotation
+        this.jwtService.clearActiveKeyCache();
+        return {
+            deletedCount: 1,
+            skipped: false,
+            message: `Key rotation performed${keysToRetire.length > 0 ? `, ${keysToRetire.length} key(s) retired` : ''}`,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Run All Cleanup Tasks
+    // ---------------------------------------------------------------------------
+    /**
+     * Build cleanup tasks
+     */
+    buildCleanupTasks(dryRun) {
+        return [
+            {
+                name: 'revoked-tokens',
+                description: 'Remove expired revoked tokens',
+                run: () => this.cleanupRevokedTokens({ dryRun }),
+            },
+            {
+                name: 'oauth-codes',
+                description: 'Remove expired and consumed OAuth authorization codes',
+                run: () => this.cleanupOAuthCodes({ dryRun }),
+            },
+            {
+                name: 'email-verifications',
+                description: 'Remove expired email verification tokens',
+                run: () => this.cleanupEmailVerifications({ dryRun }),
+            },
+            {
+                name: 'password-resets',
+                description: 'Remove expired password reset tokens',
+                run: () => this.cleanupPasswordResets({ dryRun }),
+            },
+            {
+                name: 'deleted-users',
+                description: 'Permanently delete users after retention period',
+                run: () => this.cleanupDeletedUsers({ dryRun }),
+            },
+            {
+                name: 'pending-oauth-registrations',
+                description: 'Remove expired pending OAuth registrations',
+                run: () => this.cleanupPendingOAuthRegistrations({ dryRun }),
+            },
+            {
+                name: 'jwt-keys',
+                description: 'Rotate expired JWT signing keys',
+                run: () => this.rotateExpiredJwtKeys({ dryRun }),
+            },
+        ];
+    }
+    /**
+     * Run all cleanup tasks.
+     *
+     * @param options - Cleanup options (dryRun, verbose)
+     * @returns Summary of all task executions
+     */
+    async runAll(options) {
+        const results = [];
+        const startTime = Date.now();
+        const tasks = this.buildCleanupTasks(options.dryRun);
+        for (const task of tasks) {
+            const taskStart = Date.now();
+            try {
+                const result = await task.run();
+                results.push({
+                    name: task.name,
+                    description: task.description,
+                    result,
+                    durationMs: Date.now() - taskStart,
+                });
+            }
+            catch (error) {
+                results.push({
+                    name: task.name,
+                    description: task.description,
+                    result: {
+                        deletedCount: 0,
+                        skipped: false,
+                        message: error instanceof Error ? error.message : 'Unknown error',
+                    },
+                    durationMs: Date.now() - taskStart,
+                    error: error instanceof Error ? error : new Error(String(error)),
+                });
+            }
+        }
+        const totalDeleted = results.reduce((sum, r) => {
+            if (!r.error && !r.result.skipped) {
+                return sum + r.result.deletedCount;
+            }
+            return sum;
+        }, 0);
+        const totalSkipped = results.filter((r) => r.result.skipped).length;
+        const totalFailed = results.filter((r) => r.error).length;
+        return {
+            tasks: results,
+            totalDeleted,
+            totalSkipped,
+            totalFailed,
+            totalDurationMs: Date.now() - startTime,
+        };
+    }
+}
+//# sourceMappingURL=cleanup.service.js.map

package/dist/services/cleanup.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.service.js","sourceRoot":"","sources":["../../src/services/cleanup.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,oCAAoC,EAAE,MAAM,kDAAkD,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AAEjG,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AA2D5B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,CAAwB;IAC9B,KAAK,CAAe;IACpB,UAAU,CAAa;IACxC,YACE,MAA6B,EAC7B,KAAmB,EACnB,UAAsB;QAEtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAE9E;;;;;;;;;;OAUG;IACH,KAAK,CAAC,oBAAoB,CAAC,OAAuB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QAElD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAG,EAAE,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzD,kDAAkD;QAClD,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC;YAChD,UAAU,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC;QAEnC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,gBAAgB,KAAK,uBAAuB,cAAc,CAAC,WAAW,CAAC,GAAG;aACpF,CAAC;QACJ,CAAC;QAED,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,YAAY,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE3E,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,cAAc,cAAc,CAAC,WAAW,CAAC,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAE9E;;;;;;;;;OASG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAuB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAE/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,EAAE,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;QAE9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACzE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAE1E,mCAAmC;QACnC,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC;YAC5C,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;SACxB,CAAC,CAAC;QAEH,kDAAkD;QAClD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC;YAC7C,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,kBAAkB,EAAE;SACnD,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;QACzC,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC;QAC3C,MAAM,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;QAEhD,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,8BAA8B;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,YAAY,EAAE,UAAU;gBACxB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,gBAAgB,YAAY,aAAa,aAAa,yBAAyB,cAAc,CAAC,mBAAmB,CAAC,GAAG;aAC/H,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,EAAE,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO;YACL,YAAY,EAAE,UAAU;YACxB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,GAAG,YAAY,aAAa,aAAa,WAAW;SAC9D,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E;;;;;;;;;OASG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAAuB;QAEvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAEvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,qBAAqB,GAAG,EAAE,CAAC,aAAa,CAC5C,6BAA6B,CAC9B,CAAC;QAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzD,8CAA8C;QAC9C,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC;YAC9C,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;YAC9B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,gBAAgB,KAAK,uBAAuB,cAAc,CAAC,WAAW,CAAC,GAAG;aACpF,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC;YAC5D,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;YAC9B,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,YAAY;gBACZ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,cAAc,cAAc,CAAC,WAAW,CAAC,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,0BAA0B;IAC1B,8EAA8E;IAE9E;;;;;;;;;OASG;IACH,KAAK,CAAC,qBAAqB,CAAC,OAAuB;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;QAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,iBAAiB,GAAG,EAAE,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC;QAEtE,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzD,8CAA8C;QAC9C,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC;YAC1C,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;YAC9B,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3E,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,gBAAgB,KAAK,uBAAuB,cAAc,CAAC,WAAW,CAAC,GAAG;aACpF,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC;YACxD,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;YAC9B,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,YAAY;gBACZ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,cAAc,cAAc,CAAC,WAAW,CAAC,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAuB;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,sCAAsC;aAChD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAE9C,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzD,oEAAoE;QACpE,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACxC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE;YAC1C,UAAU,EAAE,UAAU,EAAE,qCAAqC;SAC9D,CAAC,CAAC;QAEH,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,uCAAuC;aACjD,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,MAAM;gBAClC,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,gBAAgB,aAAa,CAAC,MAAM,sBAAsB,cAAc,CAAC,WAAW,CAAC,GAAG;aAClG,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEvD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,mDAAmD;gBACnD,uDAAuD;gBACvD,MAAM,EAAE,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAChE,MAAM,EAAE,CAAC,YAAY,CAAC,gCAAgC,EAAE;oBACtD,IAAI,EAAE,OAAO;iBACd,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/D,MAAM,EAAE,CAAC,YAAY,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClE,MAAM,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC5D,MAAM,EAAE,CAAC,YAAY,CAAC,sBAAsB,EAAE;oBAC5C,IAAI,EAAE,OAAO;iBACd,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC,YAAY,CAAC,6BAA6B,EAAE;oBACnD,IAAI,EAAE,OAAO;iBACd,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC,YAAY,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAEpE,0BAA0B;gBAC1B,MAAM,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACpD,YAAY,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;gBAC1C,0DAA0D;YAC5D,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY;YACZ,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,cAAc,cAAc,CAAC,WAAW,CAAC,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,sCAAsC;IACtC,8EAA8E;IAE9E;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gCAAgC,CACpC,OAAuB;QAEvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC;QAE/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YAC7B,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAC/B,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,kCAAkC;aAC5C,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,gBAAgB,KAAK,sCAAsC,cAAc,CAAC,WAAW,CAAC,GAAG;aACnG,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YAC3C,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAC/B,CAAC,CAAC;QAEH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO;gBACL,YAAY;gBACZ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,cAAc,cAAc,CAAC,WAAW,CAAC,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY;YACZ,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,oBAAoB;IACpB,8EAA8E;IAE9E;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,oBAAoB,CAAC,OAAuB;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACvD,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC;QAE/C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,8BAA8B;aACxC,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,8DAA8D;QAC9D,qDAAqD;QACrD,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,YAAY,CAAqB,CAAC;QAEtE,gCAAgC;QAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACxC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;SACzB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,YAAY,EAAE,WAAW,CAAC,MAAM;oBAChC,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,gBAAgB,WAAW,CAAC,MAAM,iBAAiB;iBAC7D,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,oBAAoB;aAC9B,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,oBAAoB;aAC9B,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,gDAAgD;QAChD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC;YACnC,GAAG,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CACpC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,EAC7B,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,CAC9B,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,mBAAmB;YACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;YACxD,MAAM,YAAY,GAAG,cAAc,CAAC,aAAa,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC;YAEtD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE;gBAChC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,WAAW,EAAE,OAAO,CAAC,UAAU;gBAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,YAAY,CAAC,IAAI;gBACzB,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;QACrC,OAAO,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QAElC,kDAAkD;QAClD,MAAM,WAAW,GAAG,cAAc,CAAC,YAAY,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACzC,MAAM,EAAE,YAAY,CAAC,QAAQ;YAC7B,cAAc,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SACpC,CAAC,CAAC;QAEH,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC;YAClC,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAEjB,yCAAyC;QACzC,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;QAEtC,OAAO;YACL,YAAY,EAAE,CAAC;YACf,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,yBAAyB,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE;SAC7G,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E;;OAEG;IACK,iBAAiB,CAAC,MAAe;QACvC,OAAO;YACL;gBACE,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,+BAA+B;gBAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;aACjD;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,uDAAuD;gBACpE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;aAC9C;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,0CAA0C;gBACvD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;aACtD;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,sCAAsC;gBACnD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;aAClD;YACD;gBACE,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,iDAAiD;gBAC9D,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;aAChD;YACD;gBACE,IAAI,EAAE,6BAA6B;gBACnC,WAAW,EAAE,4CAA4C;gBACzD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC7D;YACD;gBACE,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,iCAAiC;gBAC9C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;aACjD;SACF,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAGZ;QACC,MAAM,OAAO,GAA0B,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBAEhC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,MAAM;oBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,MAAM,EAAE;wBACN,YAAY,EAAE,CAAC;wBACf,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;qBAClE;oBACD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;iBACjE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YAC7C,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACrC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,EAAE,CAAC,CAAC,CAAC;QAEN,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAE1D,OAAO;YACL,KAAK,EAAE,OAAO;YACd,YAAY;YACZ,YAAY;YACZ,WAAW;YACX,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACxC,CAAC;IACJ,CAAC;CACF"}