@vorionsys/platform-core 0.1.0

package/dist/security/headers/validator.js

@@ -0,0 +1,616 @@
+/**
+ * Security Headers Validator
+ *
+ * Validates security header configurations and generates security scores.
+ *
+ * @packageDocumentation
+ * @module security/headers/validator
+ */
+import { createLogger } from '../../common/logger.js';
+import { isProductionGrade } from '../../common/security-mode.js';
+import { HSTS_MIN_MAX_AGE_FOR_PRELOAD, HSTS_RECOMMENDED_MAX_AGE } from './types.js';
+const logger = createLogger({ component: 'security-headers-validator' });
+// =============================================================================
+// Constants
+// =============================================================================
+/**
+ * Maximum score for each header category
+ */
+const SCORE_WEIGHTS = {
+    csp: 25,
+    hsts: 15,
+    cors: 15,
+    xFrameOptions: 10,
+    xContentTypeOptions: 5,
+    referrerPolicy: 10,
+    permissionsPolicy: 10,
+    crossOriginPolicies: 10,
+};
+/**
+ * Total possible score
+ */
+const MAX_SCORE = Object.values(SCORE_WEIGHTS).reduce((a, b) => a + b, 0);
+// =============================================================================
+// CSP Validation
+// =============================================================================
+/**
+ * Validate CSP directives
+ */
+function validateCSP(directives, isProd) {
+    const issues = [];
+    let score = SCORE_WEIGHTS.csp;
+    // Check for default-src
+    if (!directives['default-src']) {
+        issues.push({
+            severity: 'warning',
+            header: 'Content-Security-Policy',
+            message: 'Missing default-src directive',
+            recommendation: "Add default-src 'self' as a baseline",
+        });
+        score -= 5;
+    }
+    // Check for object-src
+    if (!directives['object-src']) {
+        issues.push({
+            severity: 'warning',
+            header: 'Content-Security-Policy',
+            message: 'Missing object-src directive',
+            recommendation: "Add object-src 'none' to prevent plugin-based attacks",
+        });
+        score -= 3;
+    }
+    else if (!directives['object-src'].includes("'none'")) {
+        issues.push({
+            severity: 'warning',
+            header: 'Content-Security-Policy',
+            message: "object-src should be 'none'",
+            recommendation: 'Plugins are legacy; set object-src to none',
+        });
+        score -= 2;
+    }
+    // Check for script-src unsafe-inline
+    const scriptSrc = directives['script-src'] ?? directives['default-src'] ?? [];
+    if (scriptSrc.includes("'unsafe-inline'")) {
+        if (isProd) {
+            issues.push({
+                severity: 'error',
+                header: 'Content-Security-Policy',
+                message: "unsafe-inline in script-src is not allowed in production",
+                recommendation: 'Use nonces or hashes for inline scripts',
+            });
+            score -= 10;
+        }
+        else {
+            issues.push({
+                severity: 'warning',
+                header: 'Content-Security-Policy',
+                message: 'unsafe-inline in script-src is insecure',
+                recommendation: 'Use nonces or hashes for inline scripts',
+            });
+            score -= 5;
+        }
+    }
+    // Check for script-src unsafe-eval
+    if (scriptSrc.includes("'unsafe-eval'")) {
+        if (isProd) {
+            issues.push({
+                severity: 'error',
+                header: 'Content-Security-Policy',
+                message: "unsafe-eval in script-src is not allowed in production",
+                recommendation: 'Remove unsafe-eval and refactor code to avoid eval()',
+            });
+            score -= 10;
+        }
+        else {
+            issues.push({
+                severity: 'warning',
+                header: 'Content-Security-Policy',
+                message: 'unsafe-eval in script-src allows code injection',
+                recommendation: 'Avoid eval() and related functions',
+            });
+            score -= 5;
+        }
+    }
+    // Check for wildcards
+    const wildcardDirs = ['script-src', 'connect-src', 'frame-ancestors'];
+    for (const dir of wildcardDirs) {
+        const values = directives[dir] ?? [];
+        if (values.includes('*') || values.some((v) => v === 'https:' || v === 'http:')) {
+            issues.push({
+                severity: isProd ? 'error' : 'warning',
+                header: 'Content-Security-Policy',
+                message: `Overly permissive ${dir} directive`,
+                recommendation: `Specify explicit origins instead of wildcards in ${dir}`,
+            });
+            score -= isProd ? 5 : 3;
+        }
+    }
+    // Check for base-uri
+    if (!directives['base-uri']) {
+        issues.push({
+            severity: 'warning',
+            header: 'Content-Security-Policy',
+            message: 'Missing base-uri directive',
+            recommendation: "Add base-uri 'self' or 'none' to prevent base tag hijacking",
+        });
+        score -= 2;
+    }
+    // Check for form-action
+    if (!directives['form-action']) {
+        issues.push({
+            severity: 'info',
+            header: 'Content-Security-Policy',
+            message: 'Missing form-action directive',
+            recommendation: "Consider adding form-action to restrict form submissions",
+        });
+        score -= 1;
+    }
+    // Check for frame-ancestors
+    if (!directives['frame-ancestors']) {
+        issues.push({
+            severity: 'warning',
+            header: 'Content-Security-Policy',
+            message: 'Missing frame-ancestors directive',
+            recommendation: "Add frame-ancestors 'none' or 'self' for clickjacking protection",
+        });
+        score -= 2;
+    }
+    // Check for upgrade-insecure-requests in production
+    if (isProd && !directives['upgrade-insecure-requests']) {
+        issues.push({
+            severity: 'info',
+            header: 'Content-Security-Policy',
+            message: 'upgrade-insecure-requests not enabled',
+            recommendation: 'Enable upgrade-insecure-requests for HTTPS migration',
+        });
+        score -= 1;
+    }
+    // Bonus for strict-dynamic
+    if (scriptSrc.includes("'strict-dynamic'")) {
+        score = Math.min(score + 2, SCORE_WEIGHTS.csp);
+    }
+    return { issues, score: Math.max(0, score) };
+}
+// =============================================================================
+// HSTS Validation
+// =============================================================================
+/**
+ * Validate HSTS configuration
+ */
+function validateHSTS(config, enabled, isProd) {
+    const issues = [];
+    let score = SCORE_WEIGHTS.hsts;
+    if (!enabled) {
+        if (isProd) {
+            issues.push({
+                severity: 'error',
+                header: 'Strict-Transport-Security',
+                message: 'HSTS is not enabled in production',
+                recommendation: 'Enable HSTS with at least 1 year max-age',
+            });
+            return { issues, score: 0 };
+        }
+        else {
+            issues.push({
+                severity: 'info',
+                header: 'Strict-Transport-Security',
+                message: 'HSTS is not enabled',
+                recommendation: 'Consider enabling HSTS',
+            });
+            return { issues, score: score - 5 };
+        }
+    }
+    // Check max-age
+    if (config.maxAge < HSTS_MIN_MAX_AGE_FOR_PRELOAD) {
+        issues.push({
+            severity: isProd ? 'warning' : 'info',
+            header: 'Strict-Transport-Security',
+            message: `max-age of ${config.maxAge} is below recommended ${HSTS_MIN_MAX_AGE_FOR_PRELOAD} (1 year)`,
+            recommendation: `Increase max-age to at least ${HSTS_MIN_MAX_AGE_FOR_PRELOAD}`,
+        });
+        score -= 3;
+    }
+    if (config.maxAge < HSTS_RECOMMENDED_MAX_AGE) {
+        score -= 2;
+    }
+    // Check includeSubDomains
+    if (!config.includeSubDomains) {
+        issues.push({
+            severity: 'warning',
+            header: 'Strict-Transport-Security',
+            message: 'includeSubDomains is not enabled',
+            recommendation: 'Enable includeSubDomains to protect all subdomains',
+        });
+        score -= 3;
+    }
+    // Check preload
+    if (!config.preload) {
+        issues.push({
+            severity: 'info',
+            header: 'Strict-Transport-Security',
+            message: 'preload is not enabled',
+            recommendation: 'Consider enabling preload and submitting to hstspreload.org',
+        });
+        score -= 2;
+    }
+    return { issues, score: Math.max(0, score) };
+}
+// =============================================================================
+// CORS Validation
+// =============================================================================
+/**
+ * Validate CORS configuration
+ */
+function validateCORS(config, enabled, isProd) {
+    const issues = [];
+    let score = SCORE_WEIGHTS.cors;
+    if (!enabled) {
+        // CORS not needed for all services
+        return { issues, score };
+    }
+    // Check for wildcard origin
+    if (config.allowedOrigins.includes('*')) {
+        if (isProd) {
+            issues.push({
+                severity: 'error',
+                header: 'CORS',
+                message: 'Wildcard (*) origin is not allowed in production',
+                recommendation: 'Specify explicit allowed origins',
+            });
+            score = 0;
+        }
+        else {
+            issues.push({
+                severity: 'warning',
+                header: 'CORS',
+                message: 'Wildcard (*) origin is insecure',
+                recommendation: 'Specify explicit allowed origins',
+            });
+            score -= 10;
+        }
+    }
+    // Check for credentials with wildcard
+    if (config.credentials && config.allowedOrigins.includes('*')) {
+        issues.push({
+            severity: 'error',
+            header: 'CORS',
+            message: 'Cannot use credentials with wildcard origin',
+            recommendation: 'Specify explicit origins when using credentials',
+        });
+        score -= 5;
+    }
+    // Check allowed methods
+    const dangerousMethods = ['PUT', 'DELETE', 'PATCH'];
+    const allowsDangerous = dangerousMethods.some((m) => config.allowedMethods.includes(m));
+    if (allowsDangerous && config.allowedOrigins.includes('*')) {
+        issues.push({
+            severity: 'warning',
+            header: 'CORS',
+            message: 'Dangerous methods allowed with wildcard origin',
+            recommendation: 'Restrict origins when allowing PUT/DELETE/PATCH',
+        });
+        score -= 3;
+    }
+    // Check max-age
+    if (config.maxAge > 86400) {
+        issues.push({
+            severity: 'info',
+            header: 'CORS',
+            message: `CORS max-age of ${config.maxAge} is very long`,
+            recommendation: 'Consider reducing max-age for faster policy updates',
+        });
+        score -= 1;
+    }
+    // Check private network access
+    if (config.privateNetworkAccess && config.allowedOrigins.includes('*')) {
+        issues.push({
+            severity: 'error',
+            header: 'CORS',
+            message: 'Private network access should not be combined with wildcard origin',
+            recommendation: 'Use explicit origins with private network access',
+        });
+        score -= 5;
+    }
+    return { issues, score: Math.max(0, score) };
+}
+// =============================================================================
+// Permissions Policy Validation
+// =============================================================================
+/**
+ * Validate Permissions Policy configuration
+ */
+function validatePermissionsPolicy(config, enabled, isProd) {
+    const issues = [];
+    let score = SCORE_WEIGHTS.permissionsPolicy;
+    if (!enabled) {
+        issues.push({
+            severity: isProd ? 'warning' : 'info',
+            header: 'Permissions-Policy',
+            message: 'Permissions-Policy is not enabled',
+            recommendation: 'Enable Permissions-Policy to control feature access',
+        });
+        return { issues, score: isProd ? 0 : score - 5 };
+    }
+    // Check for dangerous features
+    const highRiskFeatures = ['camera', 'microphone', 'geolocation', 'usb', 'serial'];
+    for (const feature of highRiskFeatures) {
+        const value = config[feature];
+        if (value && value !== '()') {
+            issues.push({
+                severity: isProd ? 'warning' : 'info',
+                header: 'Permissions-Policy',
+                message: `High-risk feature "${feature}" is enabled`,
+                recommendation: `Consider disabling ${feature} unless needed`,
+            });
+            score -= 1;
+        }
+    }
+    // Check for wildcard in high-risk features
+    for (const feature of highRiskFeatures) {
+        const value = config[feature];
+        if (value === '*') {
+            issues.push({
+                severity: 'error',
+                header: 'Permissions-Policy',
+                message: `Wildcard permission for high-risk feature "${feature}"`,
+                recommendation: `Restrict ${feature} to specific origins`,
+            });
+            score -= 3;
+        }
+    }
+    // Check for interest-cohort opt-out
+    if (!config['interest-cohort'] || config['interest-cohort'] !== '()') {
+        issues.push({
+            severity: 'info',
+            header: 'Permissions-Policy',
+            message: 'interest-cohort is not disabled',
+            recommendation: 'Disable interest-cohort to opt out of FLoC/Topics',
+        });
+        score -= 1;
+    }
+    return { issues, score: Math.max(0, score) };
+}
+// =============================================================================
+// Cross-Origin Policies Validation
+// =============================================================================
+/**
+ * Validate Cross-Origin policies (COEP, COOP, CORP)
+ */
+function validateCrossOriginPolicies(config, isProd) {
+    const issues = [];
+    let score = SCORE_WEIGHTS.crossOriginPolicies;
+    // COEP
+    if (!config.coep.enabled) {
+        issues.push({
+            severity: 'info',
+            header: 'Cross-Origin-Embedder-Policy',
+            message: 'COEP is not enabled',
+            recommendation: 'Consider enabling COEP for cross-origin isolation',
+        });
+        score -= 2;
+    }
+    else if (config.coep.value === 'unsafe-none') {
+        issues.push({
+            severity: 'info',
+            header: 'Cross-Origin-Embedder-Policy',
+            message: "COEP is set to 'unsafe-none'",
+            recommendation: "Use 'require-corp' or 'credentialless' for better isolation",
+        });
+        score -= 1;
+    }
+    // COOP
+    if (!config.coop.enabled) {
+        issues.push({
+            severity: 'info',
+            header: 'Cross-Origin-Opener-Policy',
+            message: 'COOP is not enabled',
+            recommendation: 'Consider enabling COOP for process isolation',
+        });
+        score -= 2;
+    }
+    else if (config.coop.value === 'unsafe-none') {
+        issues.push({
+            severity: 'info',
+            header: 'Cross-Origin-Opener-Policy',
+            message: "COOP is set to 'unsafe-none'",
+            recommendation: "Use 'same-origin' or 'same-origin-allow-popups' for better isolation",
+        });
+        score -= 1;
+    }
+    // CORP
+    if (!config.corp.enabled) {
+        issues.push({
+            severity: 'info',
+            header: 'Cross-Origin-Resource-Policy',
+            message: 'CORP is not enabled',
+            recommendation: 'Consider enabling CORP to control resource loading',
+        });
+        score -= 2;
+    }
+    return { issues, score: Math.max(0, score) };
+}
+// =============================================================================
+// Other Headers Validation
+// =============================================================================
+/**
+ * Validate other security headers
+ */
+function validateOtherHeaders(config, isProd) {
+    const issues = [];
+    let score = 0;
+    // X-Frame-Options
+    if (!config.xFrameOptions.enabled) {
+        issues.push({
+            severity: isProd ? 'warning' : 'info',
+            header: 'X-Frame-Options',
+            message: 'X-Frame-Options is not enabled',
+            recommendation: "Enable X-Frame-Options as fallback for CSP frame-ancestors",
+        });
+    }
+    else {
+        score += SCORE_WEIGHTS.xFrameOptions;
+        if (config.xFrameOptions.value !== 'DENY') {
+            score -= 2;
+        }
+    }
+    // X-Content-Type-Options
+    if (!config.xContentTypeOptions.enabled) {
+        issues.push({
+            severity: isProd ? 'warning' : 'info',
+            header: 'X-Content-Type-Options',
+            message: 'X-Content-Type-Options is not enabled',
+            recommendation: 'Enable X-Content-Type-Options: nosniff',
+        });
+    }
+    else {
+        score += SCORE_WEIGHTS.xContentTypeOptions;
+    }
+    // Referrer-Policy
+    if (!config.referrerPolicy.enabled) {
+        issues.push({
+            severity: isProd ? 'warning' : 'info',
+            header: 'Referrer-Policy',
+            message: 'Referrer-Policy is not enabled',
+            recommendation: 'Enable Referrer-Policy to control referrer information',
+        });
+    }
+    else {
+        score += SCORE_WEIGHTS.referrerPolicy;
+        const weakPolicies = ['unsafe-url', 'no-referrer-when-downgrade'];
+        if (weakPolicies.includes(config.referrerPolicy.value)) {
+            issues.push({
+                severity: 'warning',
+                header: 'Referrer-Policy',
+                message: `Referrer-Policy '${config.referrerPolicy.value}' may leak sensitive URLs`,
+                recommendation: "Use 'strict-origin-when-cross-origin' or stricter",
+            });
+            score -= 3;
+        }
+    }
+    return { issues, score: Math.max(0, score) };
+}
+// =============================================================================
+// Main Validation Function
+// =============================================================================
+/**
+ * Calculate grade from score
+ */
+function calculateGrade(score, maxScore) {
+    const percentage = (score / maxScore) * 100;
+    if (percentage >= 95)
+        return 'A+';
+    if (percentage >= 85)
+        return 'A';
+    if (percentage >= 70)
+        return 'B';
+    if (percentage >= 55)
+        return 'C';
+    if (percentage >= 40)
+        return 'D';
+    return 'F';
+}
+/**
+ * Validate a complete security headers configuration
+ *
+ * @param config - The security headers configuration to validate
+ * @returns Validation result with score, grade, and issues
+ */
+export function validateSecurityHeaders(config) {
+    const isProd = config.mode === 'production' || isProductionGrade();
+    const allIssues = [];
+    let totalScore = 0;
+    // Validate CSP
+    if (config.csp.enabled) {
+        const { issues, score } = validateCSP(config.csp.directives, isProd);
+        allIssues.push(...issues);
+        totalScore += score;
+    }
+    else {
+        allIssues.push({
+            severity: isProd ? 'error' : 'warning',
+            header: 'Content-Security-Policy',
+            message: 'CSP is not enabled',
+            recommendation: 'Enable CSP with a strict policy',
+        });
+    }
+    // Validate HSTS
+    const hstsResult = validateHSTS(config.hsts.config, config.hsts.enabled, isProd);
+    allIssues.push(...hstsResult.issues);
+    totalScore += hstsResult.score;
+    // Validate CORS
+    const corsResult = validateCORS(config.cors.config, config.cors.enabled, isProd);
+    allIssues.push(...corsResult.issues);
+    totalScore += corsResult.score;
+    // Validate Permissions Policy
+    const ppResult = validatePermissionsPolicy(config.permissionsPolicy.config, config.permissionsPolicy.enabled, isProd);
+    allIssues.push(...ppResult.issues);
+    totalScore += ppResult.score;
+    // Validate Cross-Origin policies
+    const coResult = validateCrossOriginPolicies(config, isProd);
+    allIssues.push(...coResult.issues);
+    totalScore += coResult.score;
+    // Validate other headers
+    const otherResult = validateOtherHeaders(config, isProd);
+    allIssues.push(...otherResult.issues);
+    totalScore += otherResult.score;
+    // Calculate summary
+    const summary = {
+        errors: allIssues.filter((i) => i.severity === 'error').length,
+        warnings: allIssues.filter((i) => i.severity === 'warning').length,
+        info: allIssues.filter((i) => i.severity === 'info').length,
+    };
+    // Determine validity
+    const valid = summary.errors === 0;
+    // Calculate grade
+    const grade = calculateGrade(totalScore, MAX_SCORE);
+    // Log validation result
+    logger.info({
+        score: totalScore,
+        maxScore: MAX_SCORE,
+        grade,
+        errors: summary.errors,
+        warnings: summary.warnings,
+        valid,
+    }, 'Security headers validation completed');
+    return {
+        valid,
+        score: totalScore,
+        maxScore: MAX_SCORE,
+        grade,
+        issues: allIssues,
+        summary,
+    };
+}
+/**
+ * Assert that a security headers configuration is valid for production
+ *
+ * @param config - The configuration to validate
+ * @throws Error if validation fails
+ */
+export function assertValidSecurityHeaders(config) {
+    const result = validateSecurityHeaders(config);
+    if (!result.valid) {
+        const errors = result.issues.filter((i) => i.severity === 'error');
+        throw new Error(`Security headers validation failed:\n${errors.map((e) => `  - ${e.header}: ${e.message}`).join('\n')}`);
+    }
+    // Additional check for production grade
+    if (isProductionGrade() && result.grade === 'F') {
+        throw new Error(`Security headers configuration received grade F, which is not acceptable for production`);
+    }
+}
+/**
+ * Get a summary of the security headers configuration
+ */
+export function getSecurityHeadersSummary(config) {
+    const result = validateSecurityHeaders(config);
+    return {
+        cspEnabled: config.csp.enabled,
+        hstsEnabled: config.hsts.enabled,
+        corsEnabled: config.cors.enabled,
+        permissionsPolicyEnabled: config.permissionsPolicy.enabled,
+        crossOriginPoliciesEnabled: config.coep.enabled && config.coop.enabled,
+        grade: result.grade,
+        score: result.score,
+    };
+}
+//# sourceMappingURL=validator.js.map

package/dist/security/headers/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/security/headers/validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAUlE,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC,CAAC;AAEzE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF;;GAEG;AACH,MAAM,aAAa,GAAG;IACpB,GAAG,EAAE,EAAE;IACP,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,aAAa,EAAE,EAAE;IACjB,mBAAmB,EAAE,CAAC;IACtB,cAAc,EAAE,EAAE;IAClB,iBAAiB,EAAE,EAAE;IACrB,mBAAmB,EAAE,EAAE;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1E,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,WAAW,CAClB,UAAyB,EACzB,MAAe;IAEf,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC;IAE9B,wBAAwB;IACxB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,+BAA+B;YACxC,cAAc,EAAE,sCAAsC;SACvD,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,8BAA8B;YACvC,cAAc,EAAE,uDAAuD;SACxE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,6BAA6B;YACtC,cAAc,EAAE,4CAA4C;SAC7D,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,qCAAqC;IACrC,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAC9E,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,0DAA0D;gBACnE,cAAc,EAAE,yCAAyC;aAC1D,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,yCAAyC;gBAClD,cAAc,EAAE,yCAAyC;aAC1D,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,wDAAwD;gBACjE,cAAc,EAAE,sDAAsD;aACvE,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,iDAAiD;gBAC1D,cAAc,EAAE,oCAAoC;aACrD,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,iBAAiB,CAAU,CAAC;IAC/E,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACtC,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,qBAAqB,GAAG,YAAY;gBAC7C,cAAc,EAAE,oDAAoD,GAAG,EAAE;aAC1E,CAAC,CAAC;YACH,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,4BAA4B;YACrC,cAAc,EAAE,6DAA6D;SAC9E,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,+BAA+B;YACxC,cAAc,EAAE,0DAA0D;SAC3E,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,mCAAmC;YAC5C,cAAc,EAAE,kEAAkE;SACnF,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,oDAAoD;IACpD,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,uCAAuC;YAChD,cAAc,EAAE,sDAAsD;SACvE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,2BAA2B;IAC3B,IAAI,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC3C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,YAAY,CACnB,MAAkB,EAClB,OAAgB,EAChB,MAAe;IAEf,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC;IAE/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,2BAA2B;gBACnC,OAAO,EAAE,mCAAmC;gBAC5C,cAAc,EAAE,0CAA0C;aAC3D,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,2BAA2B;gBACnC,OAAO,EAAE,qBAAqB;gBAC9B,cAAc,EAAE,wBAAwB;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACrC,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,cAAc,MAAM,CAAC,MAAM,yBAAyB,4BAA4B,WAAW;YACpG,cAAc,EAAE,gCAAgC,4BAA4B,EAAE;SAC/E,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,kCAAkC;YAC3C,cAAc,EAAE,oDAAoD;SACrE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,wBAAwB;YACjC,cAAc,EAAE,6DAA6D;SAC9E,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,YAAY,CACnB,MAAkB,EAClB,OAAgB,EAChB,MAAe;IAEf,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC;IAE/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,mCAAmC;QACnC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,kDAAkD;gBAC3D,cAAc,EAAE,kCAAkC;aACnD,CAAC,CAAC;YACH,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,iCAAiC;gBAC1C,cAAc,EAAE,kCAAkC;aACnD,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,6CAA6C;YACtD,cAAc,EAAE,iDAAiD;SAClE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,wBAAwB;IACxB,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAClD,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAClC,CAAC;IACF,IAAI,eAAe,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gDAAgD;YACzD,cAAc,EAAE,iDAAiD;SAClE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mBAAmB,MAAM,CAAC,MAAM,eAAe;YACxD,cAAc,EAAE,qDAAqD;SACtE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oEAAoE;YAC7E,cAAc,EAAE,kDAAkD;SACnE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF;;GAEG;AACH,SAAS,yBAAyB,CAChC,MAA+B,EAC/B,OAAgB,EAChB,MAAe;IAEf,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,aAAa,CAAC,iBAAiB,CAAC;IAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACrC,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,mCAAmC;YAC5C,cAAc,EAAE,qDAAqD;SACtE,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,+BAA+B;IAC/B,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAwC,CAAC,CAAC;QAC/D,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;gBACrC,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,sBAAsB,OAAO,cAAc;gBACpD,cAAc,EAAE,sBAAsB,OAAO,gBAAgB;aAC9D,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAwC,CAAC,CAAC;QAC/D,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,8CAA8C,OAAO,GAAG;gBACjE,cAAc,EAAE,YAAY,OAAO,sBAAsB;aAC1D,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,iCAAiC;YAC1C,cAAc,EAAE,mDAAmD;SACpE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAEhF;;GAEG;AACH,SAAS,2BAA2B,CAClC,MAA6B,EAC7B,MAAe;IAEf,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,aAAa,CAAC,mBAAmB,CAAC;IAE9C,OAAO;IACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,8BAA8B;YACtC,OAAO,EAAE,qBAAqB;YAC9B,cAAc,EAAE,mDAAmD;SACpE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,8BAA8B;YACtC,OAAO,EAAE,8BAA8B;YACvC,cAAc,EAAE,6DAA6D;SAC9E,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO;IACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,qBAAqB;YAC9B,cAAc,EAAE,8CAA8C;SAC/D,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,8BAA8B;YACvC,cAAc,EAAE,sEAAsE;SACvF,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO;IACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,8BAA8B;YACtC,OAAO,EAAE,qBAAqB;YAC9B,cAAc,EAAE,oDAAoD;SACrE,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF;;GAEG;AACH,SAAS,oBAAoB,CAC3B,MAA6B,EAC7B,MAAe;IAEf,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,kBAAkB;IAClB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACrC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,gCAAgC;YACzC,cAAc,EAAE,4DAA4D;SAC7E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,aAAa,CAAC,aAAa,CAAC;QACrC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1C,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACrC,MAAM,EAAE,wBAAwB;YAChC,OAAO,EAAE,uCAAuC;YAChD,cAAc,EAAE,wCAAwC;SACzD,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,aAAa,CAAC,mBAAmB,CAAC;IAC7C,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACrC,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,gCAAgC;YACzC,cAAc,EAAE,wDAAwD;SACzE,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,aAAa,CAAC,cAAc,CAAC;QACtC,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;QAClE,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,oBAAoB,MAAM,CAAC,cAAc,CAAC,KAAK,2BAA2B;gBACnF,cAAc,EAAE,mDAAmD;aACpE,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF;;GAEG;AACH,SAAS,cAAc,CAAC,KAAa,EAAE,QAAgB;IACrD,MAAM,UAAU,GAAG,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC;IAE5C,IAAI,UAAU,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,UAAU,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IACjC,IAAI,UAAU,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IACjC,IAAI,UAAU,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IACjC,IAAI,UAAU,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IACjC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,iBAAiB,EAAE,CAAC;IACnE,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,eAAe;IACf,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC1B,UAAU,IAAI,KAAK,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACtC,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,oBAAoB;YAC7B,cAAc,EAAE,iCAAiC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB;IAChB,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjF,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC;IAE/B,gBAAgB;IAChB,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjF,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC;IAE/B,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,yBAAyB,CACxC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAC/B,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAChC,MAAM,CACP,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,UAAU,IAAI,QAAQ,CAAC,KAAK,CAAC;IAE7B,iCAAiC;IACjC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,UAAU,IAAI,QAAQ,CAAC,KAAK,CAAC;IAE7B,yBAAyB;IACzB,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,SAAS,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,UAAU,IAAI,WAAW,CAAC,KAAK,CAAC;IAEhC,oBAAoB;IACpB,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM;QAC9D,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;QAClE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;KAC5D,CAAC;IAEF,qBAAqB;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IAEnC,kBAAkB;IAClB,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAEpD,wBAAwB;IACxB,MAAM,CAAC,IAAI,CACT;QACE,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,SAAS;QACnB,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK;KACN,EACD,uCAAuC,CACxC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,SAAS;QACnB,KAAK;QACL,MAAM,EAAE,SAAS;QACjB,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAA6B;IACtE,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAE/C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,IAAI,iBAAiB,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAA6B;IASrE,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAE/C,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;QAC9B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAChC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAChC,wBAAwB,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO;QAC1D,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO;QACtE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC"}