@trokky/trokky 2.0.3

package/dist/core/services/mfa-service.js

@@ -0,0 +1,606 @@
+import { detectCryptoAdapter } from '../crypto/adapter.js';
+import { InvalidInputError } from '../errors/index.js';
+import { TOTPService, EmailOTPService } from '../security/mfa/index.js';
+/**
+ * Generate a cryptographically secure random secret.
+ * Standalone so TrokkyCore can use it before its services exist.
+ */
+export function generateSecureSecret() {
+    // Generate a cryptographically secure random secret using crypto adapter
+    // This will be called during initialization, but we need to create a temporary adapter
+    const tempAdapter = detectCryptoAdapter();
+    const secret = tempAdapter.generateSecureRandom(64);
+    // Warn if using generated secret (should use environment variable in production)
+    const isTestEnv = (typeof process !== 'undefined' && process.env?.NODE_ENV === 'test');
+    if (!isTestEnv) {
+        console.warn('⚠️  Using auto-generated JWT secret. Set TROKKY_JWT_SECRET environment variable for production.');
+    }
+    return secret;
+}
+/**
+ * Multi-factor authentication service: TOTP and email OTP enrolment,
+ * verification, backup codes and administrative resets.
+ */
+export class MFAService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Get the TOTP service instance
+     * Creates one with a default issuer (can be overridden via settings)
+     */
+    getTOTPService(issuer) {
+        // Default issuer - can be configured via settings
+        return new TOTPService({ issuer: issuer || 'Trokky' });
+    }
+    /**
+     * Get the Email OTP service instance
+     */
+    getEmailOTPService() {
+        return new EmailOTPService({
+            codeLength: 6,
+            expiryMinutes: 10,
+            maxAttempts: 5
+        });
+    }
+    /**
+     * Check if MFA is required for a user
+     * Returns whether MFA is required and available methods
+     */
+    async checkMFARequired(userId) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Check if user has MFA enabled
+        const userHasMFA = user.mfa?.enabled === true && (user.mfa.methods?.length ?? 0) > 0;
+        const userMethods = user.mfa?.methods?.filter(m => m.enabled && m.verified).map(m => m.type) || [];
+        // Check organization-level MFA requirement
+        const settings = await this.deps.getSettings();
+        const orgRequiresMFA = settings?.mfaRequired === true;
+        // Check role-based MFA enforcement
+        const enforcedRoles = settings?.mfaEnforcedRoles || [];
+        const roleRequiresMFA = user.role !== 'api' && enforcedRoles.includes(user.role);
+        if (userHasMFA) {
+            return {
+                required: true,
+                methods: userMethods,
+                reason: 'user_enabled',
+                userHasMFA: true
+            };
+        }
+        if (orgRequiresMFA) {
+            // Org requires MFA but user hasn't set it up yet
+            const allowedMethods = settings?.mfaAllowedMethods || ['totp', 'email'];
+            return {
+                required: true,
+                methods: allowedMethods,
+                reason: 'org_required',
+                userHasMFA: false
+            };
+        }
+        if (roleRequiresMFA) {
+            // User's role requires MFA but user hasn't set it up yet
+            const allowedMethods = settings?.mfaAllowedMethods || ['totp', 'email'];
+            return {
+                required: true,
+                methods: allowedMethods,
+                reason: 'role_required',
+                userHasMFA: false
+            };
+        }
+        return {
+            required: false,
+            methods: [],
+            reason: 'not_required',
+            userHasMFA: false
+        };
+    }
+    /**
+     * Initialize TOTP setup for a user
+     * Returns QR code and secret for authenticator app
+     */
+    async initializeTOTPSetup(userId) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Get issuer from settings or use default
+        const settings = await this.deps.getSettings();
+        const issuer = settings?.studioTitle || settings?.organizationName || 'Trokky';
+        const totpService = this.getTOTPService(issuer);
+        const result = await totpService.generateSecret(user.email || user.username);
+        // Store the secret temporarily in user preferences (unverified)
+        const pendingTOTP = {
+            type: 'totp',
+            enabled: false,
+            verified: false,
+            secret: result.secret // Will be encrypted by storage adapter
+        };
+        // Update user with pending TOTP setup
+        const currentMFA = user.mfa || { enabled: false, methods: [] };
+        const existingMethods = (currentMFA.methods || []).filter(m => m.type !== 'totp');
+        await this.deps.updateUser(userId, {
+            mfa: {
+                ...currentMFA,
+                methods: [...existingMethods, pendingTOTP]
+            }
+        });
+        this.deps.logger.info('TOTP setup initialized', { userId });
+        return result;
+    }
+    /**
+     * Verify and enable TOTP for a user
+     * Must be called after initializeTOTPSetup with a valid code from authenticator
+     */
+    async verifyAndEnableTOTP(userId, code) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Find pending TOTP method
+        const pendingTOTP = user.mfa?.methods?.find(m => m.type === 'totp' && !m.verified);
+        if (!pendingTOTP || !pendingTOTP.secret) {
+            throw new InvalidInputError('No pending TOTP setup found. Call initializeTOTPSetup first.', 'totp');
+        }
+        // Verify the code
+        const totpService = this.getTOTPService();
+        const isValid = totpService.verifyCode(pendingTOTP.secret, code);
+        if (!isValid) {
+            throw new InvalidInputError('Invalid TOTP code', 'code');
+        }
+        // Update TOTP method as verified and enabled
+        const verifiedTOTP = {
+            ...pendingTOTP,
+            enabled: true,
+            verified: true,
+            verifiedAt: new Date().toISOString()
+        };
+        const currentMFA = user.mfa || { enabled: false, methods: [] };
+        const otherMethods = (currentMFA.methods || []).filter(m => m.type !== 'totp');
+        // Generate backup codes only if this is the first MFA method
+        let backupCodes;
+        let hashedBackupCodes = currentMFA.backupCodes;
+        let backupCodesGeneratedAt = currentMFA.backupCodesGeneratedAt;
+        if (!hashedBackupCodes || hashedBackupCodes.length === 0) {
+            backupCodes = totpService.generateBackupCodes(10);
+            hashedBackupCodes = backupCodes.map(c => totpService.hashBackupCode(c));
+            backupCodesGeneratedAt = new Date().toISOString();
+        }
+        await this.deps.updateUser(userId, {
+            mfa: {
+                enabled: true,
+                methods: [...otherMethods, verifiedTOTP],
+                backupCodes: hashedBackupCodes,
+                backupCodesGeneratedAt,
+                trustedDevices: currentMFA.trustedDevices || []
+            }
+        });
+        this.deps.logger.info('TOTP enabled for user', { userId });
+        // Log audit event
+        this.deps.logAuditEvent({
+            type: 'user_updated',
+            userId,
+            username: user.username,
+            action: 'MFA TOTP enabled',
+            timestamp: new Date().toISOString(),
+            success: true,
+            details: { mfaMethod: 'totp' }
+        });
+        return {
+            enabled: true,
+            backupCodes // Return plain codes - user must save them
+        };
+    }
+    /**
+     * Initialize Email OTP setup for a user
+     * Sends verification code to user's email
+     */
+    async initializeEmailOTPSetup(userId) {
+        const user = await this.deps.getUser(userId);
+        if (!user || !user.email) {
+            throw new InvalidInputError('User not found or has no email', 'userId');
+        }
+        const emailService = this.getEmailOTPService();
+        const result = emailService.generateCode();
+        // Store the OTP in user preferences
+        const storedOTP = emailService.createStoredOTP(result);
+        // Store in user preferences for later verification
+        const currentPreferences = user.preferences || {};
+        await this.deps.updateUser(userId, {
+            preferences: {
+                ...currentPreferences,
+                _pendingEmailOTP: storedOTP
+            }
+        });
+        // Emit event for email notification
+        if (this.deps.eventsEnabled) {
+            this.deps.eventBus.emitEvent({
+                type: 'user.mfa_otp_requested',
+                source: 'trokky-core',
+                data: {
+                    userId,
+                    email: user.email,
+                    firstName: user.firstName,
+                    otpCode: result.code,
+                    expiryMinutes: 10,
+                    purpose: 'MFA setup',
+                },
+            }).catch(error => {
+                this.deps.logger.warn('Failed to emit MFA OTP event', error);
+            });
+        }
+        this.deps.logger.info('Email OTP generated for MFA setup', {
+            userId,
+            email: user.email,
+            expiresAt: result.expiresAt
+        });
+        return { expiresIn: 10 * 60 }; // 10 minutes in seconds
+    }
+    /**
+     * Verify and enable Email OTP for a user
+     */
+    async verifyAndEnableEmailOTP(userId, code) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Get stored OTP from preferences
+        const storedOTP = user.preferences?._pendingEmailOTP;
+        if (!storedOTP) {
+            throw new InvalidInputError('No pending email OTP found. Call initializeEmailOTPSetup first.', 'emailOtp');
+        }
+        // Verify the code
+        const emailService = this.getEmailOTPService();
+        const verificationResult = emailService.verifyCode(code, storedOTP);
+        if (!verificationResult.valid) {
+            if (verificationResult.expired) {
+                throw new InvalidInputError('Email OTP has expired', 'code');
+            }
+            if (verificationResult.maxAttemptsExceeded) {
+                throw new InvalidInputError('Maximum verification attempts exceeded', 'code');
+            }
+            // Update attempt count
+            const updatedOTP = emailService.incrementAttempts(storedOTP);
+            await this.deps.updateUser(userId, {
+                preferences: {
+                    ...user.preferences,
+                    _pendingEmailOTP: updatedOTP
+                }
+            });
+            throw new InvalidInputError(`Invalid code. ${verificationResult.attemptsRemaining} attempts remaining.`, 'code');
+        }
+        // Create verified email MFA method
+        const emailMethod = {
+            type: 'email',
+            enabled: true,
+            verified: true,
+            verifiedAt: new Date().toISOString()
+        };
+        const currentMFA = user.mfa || { enabled: false, methods: [] };
+        const otherMethods = (currentMFA.methods || []).filter(m => m.type !== 'email');
+        // Generate backup codes if this is the first MFA method
+        let backupCodes;
+        let hashedBackupCodes = currentMFA.backupCodes;
+        let backupCodesGeneratedAt = currentMFA.backupCodesGeneratedAt;
+        if (!hashedBackupCodes || hashedBackupCodes.length === 0) {
+            const totpService = this.getTOTPService();
+            backupCodes = totpService.generateBackupCodes(10);
+            hashedBackupCodes = backupCodes.map(c => totpService.hashBackupCode(c));
+            backupCodesGeneratedAt = new Date().toISOString();
+        }
+        // Remove pending OTP and update MFA config
+        const { _pendingEmailOTP, ...cleanPreferences } = user.preferences || {};
+        await this.deps.updateUser(userId, {
+            preferences: cleanPreferences,
+            mfa: {
+                enabled: true,
+                methods: [...otherMethods, emailMethod],
+                backupCodes: hashedBackupCodes,
+                backupCodesGeneratedAt,
+                trustedDevices: currentMFA.trustedDevices || []
+            }
+        });
+        this.deps.logger.info('Email OTP enabled for user', { userId });
+        return { enabled: true, backupCodes };
+    }
+    /**
+     * Verify MFA code during login
+     * Supports TOTP, email, and backup codes
+     */
+    async verifyMFACode(userId, code, method) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        if (method === 'totp') {
+            const totpMethod = user.mfa?.methods?.find(m => m.type === 'totp' && m.enabled && m.verified);
+            if (!totpMethod?.secret) {
+                throw new InvalidInputError('TOTP not configured for this user', 'method');
+            }
+            const totpService = this.getTOTPService();
+            return totpService.verifyCode(totpMethod.secret, code);
+        }
+        if (method === 'backup') {
+            const hashedCodes = user.mfa?.backupCodes || [];
+            if (hashedCodes.length === 0) {
+                throw new InvalidInputError('No backup codes available', 'method');
+            }
+            const totpService = this.getTOTPService();
+            const result = totpService.verifyBackupCode(hashedCodes, code);
+            if (result.valid) {
+                // Update user with remaining backup codes
+                await this.deps.updateUser(userId, {
+                    mfa: {
+                        ...user.mfa,
+                        backupCodes: result.remainingCodes
+                    }
+                });
+                this.deps.logger.info('Backup code used', {
+                    userId,
+                    remainingCodes: result.remainingCodes.length
+                });
+            }
+            return result.valid;
+        }
+        if (method === 'email') {
+            // Email OTP verification during login
+            const storedOTP = user.preferences?._loginEmailOTP;
+            if (!storedOTP) {
+                throw new InvalidInputError('No email OTP sent. Call sendMFAEmailOTP first.', 'method');
+            }
+            const emailService = this.getEmailOTPService();
+            const result = emailService.verifyCode(code, storedOTP);
+            if (result.valid) {
+                // Clear the OTP
+                const { _loginEmailOTP, ...cleanPreferences } = user.preferences || {};
+                await this.deps.updateUser(userId, {
+                    preferences: cleanPreferences
+                });
+            }
+            else if (!result.expired && !result.maxAttemptsExceeded) {
+                // Update attempt count
+                const updatedOTP = emailService.incrementAttempts(storedOTP);
+                await this.deps.updateUser(userId, {
+                    preferences: {
+                        ...user.preferences,
+                        _loginEmailOTP: updatedOTP
+                    }
+                });
+            }
+            return result.valid;
+        }
+        return false;
+    }
+    /**
+     * Send Email OTP for MFA verification during login
+     */
+    async sendMFAEmailOTP(userId) {
+        const user = await this.deps.getUser(userId);
+        if (!user || !user.email) {
+            throw new InvalidInputError('User not found or has no email', 'userId');
+        }
+        // Check if email MFA is enabled for this user
+        const emailMethod = user.mfa?.methods?.find(m => m.type === 'email' && m.enabled && m.verified);
+        if (!emailMethod) {
+            throw new InvalidInputError('Email MFA not enabled for this user', 'method');
+        }
+        const emailService = this.getEmailOTPService();
+        const result = emailService.generateCode();
+        const storedOTP = emailService.createStoredOTP(result);
+        // Store for verification
+        await this.deps.updateUser(userId, {
+            preferences: {
+                ...user.preferences,
+                _loginEmailOTP: storedOTP
+            }
+        });
+        // Emit event for email notification
+        if (this.deps.eventsEnabled) {
+            this.deps.eventBus.emitEvent({
+                type: 'user.mfa_otp_requested',
+                source: 'trokky-core',
+                data: {
+                    userId,
+                    email: user.email,
+                    firstName: user.firstName,
+                    otpCode: result.code,
+                    expiryMinutes: 10,
+                    purpose: 'login verification',
+                },
+            }).catch(error => {
+                this.deps.logger.warn('Failed to emit MFA OTP event', error);
+            });
+        }
+        this.deps.logger.info('Login email OTP generated', {
+            userId,
+            email: user.email,
+            expiresAt: result.expiresAt
+        });
+        return { expiresIn: 10 * 60 };
+    }
+    /**
+     * Disable MFA method for a user
+     * Requires password verification
+     */
+    async disableMFAMethod(userId, method, password) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Verify password
+        const isPasswordValid = await this.deps.verifyPassword(password, user.passwordHash);
+        if (!isPasswordValid) {
+            throw new InvalidInputError('Invalid password', 'password');
+        }
+        // Check if this is the last MFA method
+        const enabledMethods = user.mfa?.methods?.filter(m => m.enabled && m.verified) || [];
+        if (enabledMethods.length <= 1 && enabledMethods[0]?.type === method) {
+            // Check if org requires MFA
+            const settings = await this.deps.getSettings();
+            if (settings?.mfaRequired) {
+                throw new InvalidInputError('Cannot disable last MFA method when organization requires MFA', 'method');
+            }
+        }
+        // Remove the method
+        const updatedMethods = (user.mfa?.methods || []).filter(m => m.type !== method);
+        const stillHasMFA = updatedMethods.some(m => m.enabled && m.verified);
+        await this.deps.updateUser(userId, {
+            mfa: {
+                ...user.mfa,
+                enabled: stillHasMFA,
+                methods: updatedMethods
+            }
+        });
+        this.deps.logger.info('MFA method disabled', { userId, method });
+        this.deps.logAuditEvent({
+            type: 'user_updated',
+            userId,
+            username: user.username,
+            action: `MFA ${method} disabled`,
+            timestamp: new Date().toISOString(),
+            success: true,
+            details: { mfaMethod: method }
+        });
+    }
+    /**
+     * Disable all MFA for a user (removes all methods and backup codes)
+     * Requires password verification
+     */
+    async disableAllMFA(userId, password) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Verify password
+        const isPasswordValid = await this.deps.verifyPassword(password, user.passwordHash);
+        if (!isPasswordValid) {
+            throw new InvalidInputError('Invalid password', 'password');
+        }
+        // Check if org requires MFA
+        const settings = await this.deps.getSettings();
+        if (settings?.mfaRequired) {
+            throw new InvalidInputError('Cannot disable MFA when organization requires MFA', 'mfa');
+        }
+        // Completely reset MFA
+        await this.deps.updateUser(userId, {
+            mfa: {
+                enabled: false,
+                methods: [],
+                backupCodes: [],
+                backupCodesGeneratedAt: undefined,
+                trustedDevices: []
+            }
+        });
+        this.deps.logger.info('All MFA disabled for user', { userId });
+        this.deps.logAuditEvent({
+            type: 'user_updated',
+            userId,
+            username: user.username,
+            action: 'All MFA disabled',
+            timestamp: new Date().toISOString(),
+            success: true,
+            details: { mfaDisabled: true }
+        });
+    }
+    /**
+     * Regenerate backup codes for a user
+     * Requires password verification
+     */
+    async regenerateBackupCodes(userId, password) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        // Verify password
+        const isPasswordValid = await this.deps.verifyPassword(password, user.passwordHash);
+        if (!isPasswordValid) {
+            throw new InvalidInputError('Invalid password', 'password');
+        }
+        // Check if user has MFA enabled
+        if (!user.mfa?.enabled) {
+            throw new InvalidInputError('MFA is not enabled', 'mfa');
+        }
+        const totpService = this.getTOTPService();
+        const backupCodes = totpService.generateBackupCodes(10);
+        const hashedBackupCodes = backupCodes.map(c => totpService.hashBackupCode(c));
+        await this.deps.updateUser(userId, {
+            mfa: {
+                ...user.mfa,
+                backupCodes: hashedBackupCodes,
+                backupCodesGeneratedAt: new Date().toISOString()
+            }
+        });
+        this.deps.logger.info('Backup codes regenerated', { userId });
+        return backupCodes;
+    }
+    /**
+     * Admin: Reset MFA for a user (emergency recovery)
+     * Removes all MFA configuration
+     */
+    async adminResetUserMFA(adminUserId, targetUserId) {
+        // Verify admin has permission
+        const admin = await this.deps.getUser(adminUserId);
+        if (!admin || admin.role !== 'admin') {
+            throw new InvalidInputError('Unauthorized: Admin access required', 'adminUserId');
+        }
+        const targetUser = await this.deps.getUser(targetUserId);
+        if (!targetUser) {
+            throw new InvalidInputError('Target user not found', 'targetUserId');
+        }
+        // Reset MFA configuration
+        await this.deps.updateUser(targetUserId, {
+            mfa: {
+                enabled: false,
+                methods: [],
+                backupCodes: [],
+                trustedDevices: []
+            }
+        });
+        this.deps.logger.warn('Admin reset MFA for user', {
+            adminUserId,
+            adminUsername: admin.username,
+            targetUserId,
+            targetUsername: targetUser.username
+        });
+        this.deps.logAuditEvent({
+            type: 'admin_access',
+            userId: adminUserId,
+            targetUserId,
+            username: admin.username,
+            action: 'Admin reset MFA for user',
+            timestamp: new Date().toISOString(),
+            success: true,
+            details: {
+                targetUsername: targetUser.username
+            }
+        });
+    }
+    /**
+     * Get MFA status for a user
+     */
+    async getMFAStatus(userId) {
+        const user = await this.deps.getUser(userId);
+        if (!user) {
+            throw new InvalidInputError('User not found', 'userId');
+        }
+        const mfa = user.mfa || { enabled: false, methods: [] };
+        return {
+            enabled: mfa.enabled,
+            methods: (mfa.methods || []).map(m => ({
+                type: m.type,
+                enabled: m.enabled,
+                verified: m.verified,
+                verifiedAt: m.verifiedAt
+            })),
+            backupCodesRemaining: (mfa.backupCodes || []).length,
+            backupCodesGeneratedAt: mfa.backupCodesGeneratedAt,
+            trustedDevicesCount: (mfa.trustedDevices || []).filter(d => new Date(d.expiresAt) > new Date()).length
+        };
+    }
+    generateSecureSecret() {
+        return generateSecureSecret();
+    }
+}
+//# sourceMappingURL=mfa-service.js.map

package/dist/core/services/mfa-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-service.js","sourceRoot":"","sources":["../../../src/core/services/mfa-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,eAAe,EAA8C,MAAM,0BAA0B,CAAA;AA8BnH;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,yEAAyE;IACzE,uFAAuF;IACvF,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAA;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAA;IAEnD,iFAAiF;IACjF,MAAM,SAAS,GAAG,CAAC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAA;IACtF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAA;IACjH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,IAA4B;QAA5B,SAAI,GAAJ,IAAI,CAAwB;IAAG,CAAC;IAE7D;;;OAGG;IACI,cAAc,CAAC,MAAe;QACnC,kDAAkD;QAClD,OAAO,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAA;IACxD,CAAC;IAED;;OAEG;IACI,kBAAkB;QACvB,OAAO,IAAI,eAAe,CAAC;YACzB,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,EAAE;YACjB,WAAW,EAAE,CAAC;SACf,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,gCAAgC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACpF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAElG,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QAC9C,MAAM,cAAc,GAAG,QAAQ,EAAE,WAAW,KAAK,IAAI,CAAA;QAErD,mCAAmC;QACnC,MAAM,aAAa,GAAG,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAA;QACtD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAW,CAAC,CAAA;QAEvF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,IAAI;aACjB,CAAA;QACH,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,iDAAiD;YACjD,MAAM,cAAc,GAAG,QAAQ,EAAE,iBAAiB,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACvE,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,KAAK;aAClB,CAAA;QACH,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,yDAAyD;YACzD,MAAM,cAAc,GAAG,QAAQ,EAAE,iBAAiB,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACvE,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,eAAe;gBACvB,UAAU,EAAE,KAAK;aAClB,CAAA;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,KAAK;SAClB,CAAA;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QAC9C,MAAM,MAAM,GAAG,QAAQ,EAAE,WAAW,IAAI,QAAQ,EAAE,gBAAgB,IAAI,QAAQ,CAAA;QAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE5E,gEAAgE;QAChE,MAAM,WAAW,GAAc;YAC7B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,uCAAuC;SAC9D,CAAA;QAED,sCAAsC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAC9D,MAAM,eAAe,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAEjF,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,GAAG,UAAU;gBACb,OAAO,EAAE,CAAC,GAAG,eAAe,EAAE,WAAW,CAAC;aAC3C;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAE3D,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,IAAY;QAI3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QAClF,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,IAAI,iBAAiB,CAAC,8DAA8D,EAAE,MAAM,CAAC,CAAA;QACrG,CAAC;QAED,kBAAkB;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QACzC,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAEhE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAA;QAC1D,CAAC;QAED,6CAA6C;QAC7C,MAAM,YAAY,GAAc;YAC9B,GAAG,WAAW;YACd,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAA;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAC9D,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAE9E,6DAA6D;QAC7D,IAAI,WAAiC,CAAA;QACrC,IAAI,iBAAiB,GAAG,UAAU,CAAC,WAAW,CAAA;QAC9C,IAAI,sBAAsB,GAAG,UAAU,CAAC,sBAAsB,CAAA;QAE9D,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,WAAW,GAAG,WAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;YACjD,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;YACvE,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnD,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,GAAG,YAAY,EAAE,YAAY,CAAC;gBACxC,WAAW,EAAE,iBAAiB;gBAC9B,sBAAsB;gBACtB,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE;aAChD;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAE1D,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,kBAAkB;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,WAAW,CAAC,2CAA2C;SACxD,CAAA;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,uBAAuB,CAAC,MAAc;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAA;QAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,CAAA;QAE1C,oCAAoC;QACpC,MAAM,SAAS,GAAmB,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAEtE,mDAAmD;QACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAA;QACjD,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,WAAW,EAAE;gBACX,GAAG,kBAAkB;gBACrB,gBAAgB,EAAE,SAAS;aAC5B;SACgB,CAAC,CAAA;QAEpB,oCAAoC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE;oBACJ,MAAM;oBACN,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO,EAAE,MAAM,CAAC,IAAI;oBACpB,aAAa,EAAE,EAAE;oBACjB,OAAO,EAAE,WAAW;iBACrB;aACF,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;YAC9D,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;YACzD,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAA;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,CAAA,CAAC,wBAAwB;IACxD,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,uBAAuB,CAAC,MAAc,EAAE,IAAY;QAI/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,kCAAkC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,gBAA8C,CAAA;QAClF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,iBAAiB,CAAC,iEAAiE,EAAE,UAAU,CAAC,CAAA;QAC5G,CAAC;QAED,kBAAkB;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAA;QAC9C,MAAM,kBAAkB,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QAEnE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBAC/B,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;YAC9D,CAAC;YACD,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,CAAC;gBAC3C,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,EAAE,MAAM,CAAC,CAAA;YAC/E,CAAC;YAED,uBAAuB;YACvB,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;gBACjC,WAAW,EAAE;oBACX,GAAG,IAAI,CAAC,WAAW;oBACnB,gBAAgB,EAAE,UAAU;iBAC7B;aACgB,CAAC,CAAA;YAEpB,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,kBAAkB,CAAC,iBAAiB,sBAAsB,EAC3E,MAAM,CACP,CAAA;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,WAAW,GAAc;YAC7B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAA;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAC9D,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;QAE/E,wDAAwD;QACxD,IAAI,WAAiC,CAAA;QACrC,IAAI,iBAAiB,GAAG,UAAU,CAAC,WAAW,CAAA;QAC9C,IAAI,sBAAsB,GAAG,UAAU,CAAC,sBAAsB,CAAA;QAE9D,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;YACzC,WAAW,GAAG,WAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;YACjD,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;YACvE,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnD,CAAC;QAED,2CAA2C;QAC3C,MAAM,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAA;QAExE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,WAAW,EAAE,gBAAgB;YAC7B,GAAG,EAAE;gBACH,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,GAAG,YAAY,EAAE,WAAW,CAAC;gBACvC,WAAW,EAAE,iBAAiB;gBAC9B,sBAAsB;gBACtB,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE;aAChD;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAE/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;IACvC,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,aAAa,CACxB,MAAc,EACd,IAAY,EACZ,MAAmC;QAEnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA;YAC7F,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,iBAAiB,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAA;YAC5E,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;YACzC,OAAO,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC;QAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,EAAE,CAAA;YAC/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAA;YACpE,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YAE9D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,0CAA0C;gBAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;oBACjC,GAAG,EAAE;wBACH,GAAG,IAAI,CAAC,GAAI;wBACZ,WAAW,EAAE,MAAM,CAAC,cAAc;qBACnC;iBACgB,CAAC,CAAA;gBAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;oBACxC,MAAM;oBACN,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM;iBAC7C,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,CAAC;QAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,sCAAsC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,cAA4C,CAAA;YAChF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,iBAAiB,CAAC,gDAAgD,EAAE,QAAQ,CAAC,CAAA;YACzF,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAA;YAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;YAEvD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,gBAAgB;gBAChB,MAAM,EAAE,cAAc,EAAE,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAA;gBACtE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;oBACjC,WAAW,EAAE,gBAAgB;iBACZ,CAAC,CAAA;YACtB,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC1D,uBAAuB;gBACvB,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;gBAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;oBACjC,WAAW,EAAE;wBACX,GAAG,IAAI,CAAC,WAAW;wBACnB,cAAc,EAAE,UAAU;qBAC3B;iBACgB,CAAC,CAAA;YACtB,CAAC;YAED,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,MAAc;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAA;QACzE,CAAC;QAED,8CAA8C;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC/F,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,EAAE,QAAQ,CAAC,CAAA;QAC9E,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAA;QAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,CAAA;QAC1C,MAAM,SAAS,GAAG,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAEtD,yBAAyB;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,WAAW,EAAE;gBACX,GAAG,IAAI,CAAC,WAAW;gBACnB,cAAc,EAAE,SAAS;aAC1B;SACgB,CAAC,CAAA;QAEpB,oCAAoC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE;oBACJ,MAAM;oBACN,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO,EAAE,MAAM,CAAC,IAAI;oBACpB,aAAa,EAAE,EAAE;oBACjB,OAAO,EAAE,oBAAoB;iBAC9B;aACF,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;YAC9D,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YACjD,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAA;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,CAAA;IAC/B,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAC3B,MAAc,EACd,MAAqB,EACrB,QAAgB;QAEhB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,kBAAkB;QAClB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QACnF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAA;QAC7D,CAAC;QAED,uCAAuC;QACvC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;QACpF,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACrE,4BAA4B;YAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;YAC9C,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;gBAC1B,MAAM,IAAI,iBAAiB,CACzB,+DAA+D,EAC/D,QAAQ,CACT,CAAA;YACH,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAC/E,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAA;QAErE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,GAAG,IAAI,CAAC,GAAI;gBACZ,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,cAAc;aACxB;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAEhE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,OAAO,MAAM,WAAW;YAChC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,QAAgB;QACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,kBAAkB;QAClB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QACnF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAA;QAC7D,CAAC;QAED,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QAC9C,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,iBAAiB,CACzB,mDAAmD,EACnD,KAAK,CACN,CAAA;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,EAAE;gBACf,sBAAsB,EAAE,SAAS;gBACjC,cAAc,EAAE,EAAE;aACnB;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAE9D,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,kBAAkB;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;SAC/B,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,QAAgB;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,kBAAkB;QAClB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QACnF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAA;QAC7D,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QACzC,MAAM,WAAW,GAAG,WAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QACvD,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAA;QAE7E,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YACjC,GAAG,EAAE;gBACH,GAAG,IAAI,CAAC,GAAG;gBACX,WAAW,EAAE,iBAAiB;gBAC9B,sBAAsB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACjD;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAE7D,OAAO,WAAW,CAAA;IACpB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,YAAoB;QACtE,8BAA8B;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,EAAE,aAAa,CAAC,CAAA;QACnF,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACxD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAA;QACtE,CAAC;QAED,0BAA0B;QAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE;YACvC,GAAG,EAAE;gBACH,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,EAAE;gBACf,cAAc,EAAE,EAAE;aACnB;SACgB,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YAChD,WAAW;YACX,aAAa,EAAE,KAAK,CAAC,QAAQ;YAC7B,YAAY;YACZ,cAAc,EAAE,UAAU,CAAC,QAAQ;SACpC,CAAC,CAAA;QAEF,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,WAAW;YACnB,YAAY;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,0BAA0B;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP,cAAc,EAAE,UAAU,CAAC,QAAQ;aACpC;SACF,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,MAAc;QAOtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAEvD,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC;YACH,oBAAoB,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM;YACpD,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;YAClD,mBAAmB,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,CACxC,CAAC,MAAM;SACT,CAAA;IACH,CAAC;IAEM,oBAAoB;QACzB,OAAO,oBAAoB,EAAE,CAAA;IAC/B,CAAC;CACF"}