@vorionsys/platform-core 0.1.0

package/dist/security/hsm/key-ceremony.js

@@ -0,0 +1,636 @@
+/**
+ * Key Ceremony Support
+ * Implements multi-party key generation, custodian management,
+ * and ceremony audit trail for enterprise key management
+ */
+import * as crypto from 'crypto';
+import { EventEmitter } from 'events';
+import { KeyType, KeyUsage, } from './provider';
+// ============================================================================
+// Key Ceremony Types
+// ============================================================================
+/**
+ * Ceremony types
+ */
+export var CeremonyType;
+(function (CeremonyType) {
+    /** Generate a new master key */
+    CeremonyType["MASTER_KEY_GENERATION"] = "MASTER_KEY_GENERATION";
+    /** Rotate an existing key */
+    CeremonyType["KEY_ROTATION"] = "KEY_ROTATION";
+    /** Recover a key from shares */
+    CeremonyType["KEY_RECOVERY"] = "KEY_RECOVERY";
+    /** Destroy a key */
+    CeremonyType["KEY_DESTRUCTION"] = "KEY_DESTRUCTION";
+    /** Transfer key between HSMs */
+    CeremonyType["KEY_TRANSFER"] = "KEY_TRANSFER";
+})(CeremonyType || (CeremonyType = {}));
+/**
+ * Ceremony status
+ */
+export var CeremonyStatus;
+(function (CeremonyStatus) {
+    CeremonyStatus["PENDING"] = "PENDING";
+    CeremonyStatus["IN_PROGRESS"] = "IN_PROGRESS";
+    CeremonyStatus["AWAITING_SHARES"] = "AWAITING_SHARES";
+    CeremonyStatus["SHARES_COLLECTED"] = "SHARES_COLLECTED";
+    CeremonyStatus["COMPLETED"] = "COMPLETED";
+    CeremonyStatus["FAILED"] = "FAILED";
+    CeremonyStatus["CANCELLED"] = "CANCELLED";
+})(CeremonyStatus || (CeremonyStatus = {}));
+/**
+ * Custodian roles
+ */
+export var CustodianRole;
+(function (CustodianRole) {
+    CustodianRole["ADMINISTRATOR"] = "ADMINISTRATOR";
+    CustodianRole["KEY_HOLDER"] = "KEY_HOLDER";
+    CustodianRole["WITNESS"] = "WITNESS";
+    CustodianRole["AUDITOR"] = "AUDITOR";
+})(CustodianRole || (CustodianRole = {}));
+/**
+ * Ceremony actions for audit
+ */
+export var CeremonyAction;
+(function (CeremonyAction) {
+    CeremonyAction["CEREMONY_CREATED"] = "CEREMONY_CREATED";
+    CeremonyAction["CEREMONY_STARTED"] = "CEREMONY_STARTED";
+    CeremonyAction["CUSTODIAN_PRESENT"] = "CUSTODIAN_PRESENT";
+    CeremonyAction["SHARE_GENERATED"] = "SHARE_GENERATED";
+    CeremonyAction["SHARE_DISTRIBUTED"] = "SHARE_DISTRIBUTED";
+    CeremonyAction["SHARE_SUBMITTED"] = "SHARE_SUBMITTED";
+    CeremonyAction["SHARE_VERIFIED"] = "SHARE_VERIFIED";
+    CeremonyAction["KEY_GENERATED"] = "KEY_GENERATED";
+    CeremonyAction["KEY_RECOVERED"] = "KEY_RECOVERED";
+    CeremonyAction["KEY_DESTROYED"] = "KEY_DESTROYED";
+    CeremonyAction["CEREMONY_COMPLETED"] = "CEREMONY_COMPLETED";
+    CeremonyAction["CEREMONY_FAILED"] = "CEREMONY_FAILED";
+    CeremonyAction["CEREMONY_CANCELLED"] = "CEREMONY_CANCELLED";
+})(CeremonyAction || (CeremonyAction = {}));
+// ============================================================================
+// Shamir's Secret Sharing Implementation
+// ============================================================================
+/**
+ * Shamir's Secret Sharing for key splitting
+ */
+class ShamirSecretSharing {
+    prime;
+    constructor() {
+        // Use a large prime for the finite field
+        // This is a 256-bit prime
+        this.prime = BigInt('0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141');
+    }
+    /**
+     * Split a secret into shares
+     */
+    split(secret, totalShares, requiredShares) {
+        if (requiredShares > totalShares) {
+            throw new Error('Required shares cannot exceed total shares');
+        }
+        if (requiredShares < 2) {
+            throw new Error('At least 2 shares are required for security');
+        }
+        // Convert secret to bigint
+        const secretInt = BigInt('0x' + secret.toString('hex'));
+        // Generate random coefficients for polynomial
+        const coefficients = [secretInt];
+        for (let i = 1; i < requiredShares; i++) {
+            const coef = BigInt('0x' + crypto.randomBytes(32).toString('hex')) % this.prime;
+            coefficients.push(coef);
+        }
+        // Generate shares by evaluating polynomial at different points
+        const shares = [];
+        for (let x = 1; x <= totalShares; x++) {
+            const y = this.evaluatePolynomial(coefficients, BigInt(x));
+            // Share format: [1 byte x][32 bytes y]
+            const share = Buffer.alloc(33);
+            share[0] = x;
+            const yHex = y.toString(16).padStart(64, '0');
+            Buffer.from(yHex, 'hex').copy(share, 1);
+            shares.push(share);
+        }
+        return shares;
+    }
+    /**
+     * Reconstruct secret from shares
+     */
+    reconstruct(shares) {
+        if (shares.length < 2) {
+            throw new Error('At least 2 shares required for reconstruction');
+        }
+        // Parse shares
+        const points = shares.map(share => ({
+            x: BigInt(share[0]),
+            y: BigInt('0x' + share.subarray(1).toString('hex')),
+        }));
+        // Lagrange interpolation to find secret (f(0))
+        let secret = BigInt(0);
+        for (let i = 0; i < points.length; i++) {
+            let numerator = BigInt(1);
+            let denominator = BigInt(1);
+            for (let j = 0; j < points.length; j++) {
+                if (i !== j) {
+                    numerator = (numerator * (BigInt(0) - points[j].x)) % this.prime;
+                    denominator = (denominator * (points[i].x - points[j].x)) % this.prime;
+                }
+            }
+            // Modular inverse of denominator
+            const inv = this.modInverse(denominator, this.prime);
+            const lagrange = (numerator * inv) % this.prime;
+            secret = (secret + points[i].y * lagrange) % this.prime;
+        }
+        // Ensure positive result
+        secret = ((secret % this.prime) + this.prime) % this.prime;
+        // Convert back to buffer
+        const secretHex = secret.toString(16).padStart(64, '0');
+        return Buffer.from(secretHex, 'hex');
+    }
+    /**
+     * Evaluate polynomial at point x
+     */
+    evaluatePolynomial(coefficients, x) {
+        let result = BigInt(0);
+        let power = BigInt(1);
+        for (const coef of coefficients) {
+            result = (result + coef * power) % this.prime;
+            power = (power * x) % this.prime;
+        }
+        return ((result % this.prime) + this.prime) % this.prime;
+    }
+    /**
+     * Modular multiplicative inverse using extended Euclidean algorithm
+     */
+    modInverse(a, m) {
+        let [oldR, r] = [a, m];
+        let [oldS, s] = [BigInt(1), BigInt(0)];
+        while (r !== BigInt(0)) {
+            const quotient = oldR / r;
+            [oldR, r] = [r, oldR - quotient * r];
+            [oldS, s] = [s, oldS - quotient * s];
+        }
+        return ((oldS % m) + m) % m;
+    }
+}
+// ============================================================================
+// Key Ceremony Manager
+// ============================================================================
+export class KeyCeremonyManager extends EventEmitter {
+    hsm;
+    ceremonies = new Map();
+    shamir;
+    auditCallback;
+    constructor(hsm, auditCallback) {
+        super();
+        this.hsm = hsm;
+        this.shamir = new ShamirSecretSharing();
+        this.auditCallback = auditCallback;
+    }
+    /**
+     * Create a new ceremony
+     */
+    async createCeremony(config) {
+        // Validate configuration
+        this.validateCeremonyConfig(config);
+        const ceremony = {
+            id: this.generateCeremonyId(),
+            config,
+            status: CeremonyStatus.PENDING,
+            createdAt: new Date(),
+            shares: [],
+            auditTrail: [],
+            presentCustodians: [],
+        };
+        this.ceremonies.set(ceremony.id, ceremony);
+        await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_CREATED, undefined, {
+            type: config.type,
+            totalShares: config.totalShares,
+            requiredShares: config.requiredShares,
+        });
+        this.emit('ceremonyCreated', ceremony);
+        return ceremony;
+    }
+    /**
+     * Validate ceremony configuration
+     */
+    validateCeremonyConfig(config) {
+        if (config.totalShares < 2) {
+            throw new Error('Total shares must be at least 2');
+        }
+        if (config.requiredShares < 2) {
+            throw new Error('Required shares must be at least 2');
+        }
+        if (config.requiredShares > config.totalShares) {
+            throw new Error('Required shares cannot exceed total shares');
+        }
+        const keyHolders = config.custodians.filter(c => c.role === CustodianRole.KEY_HOLDER);
+        if (keyHolders.length < config.totalShares) {
+            throw new Error('Not enough key holders for the specified share count');
+        }
+        if (config.requireDualControl && keyHolders.length < 2) {
+            throw new Error('Dual control requires at least 2 key holders');
+        }
+        if (config.requireWitnesses) {
+            const witnesses = config.custodians.filter(c => c.role === CustodianRole.WITNESS);
+            if (witnesses.length === 0) {
+                throw new Error('At least one witness is required');
+            }
+        }
+    }
+    /**
+     * Generate unique ceremony ID
+     */
+    generateCeremonyId() {
+        return `ceremony-${Date.now()}-${crypto.randomBytes(4).toString('hex')}`;
+    }
+    /**
+     * Start a ceremony
+     */
+    async startCeremony(ceremonyId) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        if (ceremony.status !== CeremonyStatus.PENDING) {
+            throw new Error(`Ceremony cannot be started from status: ${ceremony.status}`);
+        }
+        // Check if required custodians are present
+        if (ceremony.config.requireWitnesses) {
+            const witnesses = ceremony.config.custodians.filter(c => c.role === CustodianRole.WITNESS);
+            const presentWitnesses = witnesses.filter(w => ceremony.presentCustodians.includes(w.id));
+            if (presentWitnesses.length !== witnesses.length) {
+                throw new Error('All witnesses must be present to start the ceremony');
+            }
+        }
+        if (ceremony.config.requireDualControl) {
+            if (ceremony.presentCustodians.length < 2) {
+                throw new Error('Dual control requires at least 2 custodians present');
+            }
+        }
+        ceremony.status = CeremonyStatus.IN_PROGRESS;
+        ceremony.startedAt = new Date();
+        await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_STARTED);
+        this.emit('ceremonyStarted', ceremony);
+    }
+    /**
+     * Mark custodian as present
+     */
+    async markCustodianPresent(ceremonyId, custodianId, verificationData) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        const custodian = ceremony.config.custodians.find(c => c.id === custodianId);
+        if (!custodian) {
+            throw new Error(`Custodian not found: ${custodianId}`);
+        }
+        // Verify custodian identity if public key is available
+        if (custodian.publicKey && verificationData) {
+            // In real implementation, verify signature with custodian's public key
+        }
+        if (!ceremony.presentCustodians.includes(custodianId)) {
+            ceremony.presentCustodians.push(custodianId);
+        }
+        await this.addAuditEntry(ceremony, CeremonyAction.CUSTODIAN_PRESENT, custodianId);
+        this.emit('custodianPresent', { ceremony, custodian });
+    }
+    /**
+     * Execute master key generation ceremony
+     */
+    async executeMasterKeyGeneration(ceremonyId) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        if (ceremony.status !== CeremonyStatus.IN_PROGRESS) {
+            throw new Error('Ceremony must be started before execution');
+        }
+        if (ceremony.config.type !== CeremonyType.MASTER_KEY_GENERATION) {
+            throw new Error('Invalid ceremony type for key generation');
+        }
+        if (!ceremony.config.keySpec) {
+            throw new Error('Key specification required for key generation');
+        }
+        try {
+            // Generate master key in HSM
+            const keyHandle = await this.hsm.generateKey(ceremony.config.keySpec);
+            await this.addAuditEntry(ceremony, CeremonyAction.KEY_GENERATED, undefined, {
+                keyId: keyHandle.id,
+                keyType: keyHandle.type,
+            });
+            // Generate split key for backup/recovery
+            // This creates a separate "key encryption key" that is split among custodians
+            const kekSpec = {
+                label: `KEK-${keyHandle.id}`,
+                type: KeyType.AES,
+                size: 256,
+                usage: [KeyUsage.WRAP, KeyUsage.UNWRAP],
+                extractable: true, // Extractable for splitting
+            };
+            const kek = await this.hsm.generateKey(kekSpec);
+            // Export KEK for splitting (only possible because it's extractable)
+            // In real implementation, we'd use a more secure method
+            const kekMaterial = crypto.randomBytes(32); // Simulated
+            // Split the KEK among custodians
+            const shares = this.shamir.split(kekMaterial, ceremony.config.totalShares, ceremony.config.requiredShares);
+            // Distribute shares to custodians
+            const keyHolders = ceremony.config.custodians.filter(c => c.role === CustodianRole.KEY_HOLDER);
+            for (let i = 0; i < shares.length; i++) {
+                const custodian = keyHolders[i];
+                const share = shares[i];
+                // Encrypt share with custodian's public key if available
+                let encryptedShare;
+                if (custodian.publicKey) {
+                    const publicKey = crypto.createPublicKey({
+                        key: custodian.publicKey,
+                        format: 'der',
+                        type: 'spki',
+                    });
+                    encryptedShare = crypto.publicEncrypt(publicKey, share);
+                }
+                else {
+                    // For demo, just use the raw share (NOT SECURE)
+                    encryptedShare = share;
+                }
+                const keyShare = {
+                    index: i + 1,
+                    custodianId: custodian.id,
+                    encryptedShare,
+                    checksum: crypto.createHash('sha256').update(share).digest('hex'),
+                    createdAt: new Date(),
+                };
+                ceremony.shares.push(keyShare);
+                custodian.shareIndex = i + 1;
+                await this.addAuditEntry(ceremony, CeremonyAction.SHARE_DISTRIBUTED, custodian.id, { shareIndex: i + 1 });
+            }
+            // Destroy the extractable KEK after splitting
+            await this.hsm.destroyKey(kek.id);
+            ceremony.keyHandle = keyHandle.id;
+            ceremony.status = CeremonyStatus.COMPLETED;
+            ceremony.completedAt = new Date();
+            await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_COMPLETED, undefined, {
+                keyId: keyHandle.id,
+                sharesDistributed: ceremony.shares.length,
+            });
+            this.emit('ceremonyCompleted', ceremony);
+            return keyHandle;
+        }
+        catch (error) {
+            ceremony.status = CeremonyStatus.FAILED;
+            ceremony.error = error instanceof Error ? error.message : String(error);
+            await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_FAILED, undefined, {
+                error: ceremony.error,
+            });
+            this.emit('ceremonyFailed', { ceremony, error });
+            throw error;
+        }
+    }
+    /**
+     * Submit a share for key recovery
+     */
+    async submitShare(ceremonyId, custodianId, encryptedShare) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        if (ceremony.status !== CeremonyStatus.IN_PROGRESS &&
+            ceremony.status !== CeremonyStatus.AWAITING_SHARES) {
+            throw new Error('Ceremony not accepting shares');
+        }
+        const custodian = ceremony.config.custodians.find(c => c.id === custodianId);
+        if (!custodian) {
+            throw new Error(`Custodian not found: ${custodianId}`);
+        }
+        if (custodian.hasSubmittedShare) {
+            throw new Error('Custodian has already submitted a share');
+        }
+        // Store the submitted share
+        const share = {
+            index: custodian.shareIndex || ceremony.shares.length + 1,
+            custodianId,
+            encryptedShare,
+            checksum: crypto.createHash('sha256').update(encryptedShare).digest('hex'),
+            createdAt: new Date(),
+        };
+        ceremony.shares.push(share);
+        custodian.hasSubmittedShare = true;
+        custodian.submittedAt = new Date();
+        await this.addAuditEntry(ceremony, CeremonyAction.SHARE_SUBMITTED, custodianId, {
+            shareIndex: share.index,
+        });
+        // Check if we have enough shares
+        const submittedCount = ceremony.config.custodians.filter(c => c.hasSubmittedShare).length;
+        if (submittedCount >= ceremony.config.requiredShares) {
+            ceremony.status = CeremonyStatus.SHARES_COLLECTED;
+            this.emit('sharesCollected', ceremony);
+        }
+        else {
+            ceremony.status = CeremonyStatus.AWAITING_SHARES;
+        }
+        this.emit('shareSubmitted', { ceremony, custodian });
+    }
+    /**
+     * Execute key recovery ceremony
+     */
+    async executeKeyRecovery(ceremonyId) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        if (ceremony.status !== CeremonyStatus.SHARES_COLLECTED) {
+            throw new Error('Not enough shares collected for recovery');
+        }
+        if (ceremony.config.type !== CeremonyType.KEY_RECOVERY) {
+            throw new Error('Invalid ceremony type for key recovery');
+        }
+        try {
+            // Decrypt shares (using custodian private keys in real implementation)
+            const decryptedShares = ceremony.shares
+                .slice(0, ceremony.config.requiredShares)
+                .map(share => share.encryptedShare);
+            // Reconstruct the secret
+            const recoveredKey = this.shamir.reconstruct(decryptedShares);
+            await this.addAuditEntry(ceremony, CeremonyAction.KEY_RECOVERED);
+            ceremony.status = CeremonyStatus.COMPLETED;
+            ceremony.completedAt = new Date();
+            await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_COMPLETED);
+            this.emit('ceremonyCompleted', ceremony);
+            return recoveredKey;
+        }
+        catch (error) {
+            ceremony.status = CeremonyStatus.FAILED;
+            ceremony.error = error instanceof Error ? error.message : String(error);
+            await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_FAILED, undefined, {
+                error: ceremony.error,
+            });
+            this.emit('ceremonyFailed', { ceremony, error });
+            throw error;
+        }
+    }
+    /**
+     * Execute key destruction ceremony
+     */
+    async executeKeyDestruction(ceremonyId) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        if (ceremony.status !== CeremonyStatus.IN_PROGRESS) {
+            throw new Error('Ceremony must be in progress');
+        }
+        if (ceremony.config.type !== CeremonyType.KEY_DESTRUCTION) {
+            throw new Error('Invalid ceremony type for key destruction');
+        }
+        if (!ceremony.config.existingKeyId) {
+            throw new Error('Key ID required for destruction');
+        }
+        // Verify dual control if required
+        if (ceremony.config.requireDualControl) {
+            const keyHolders = ceremony.presentCustodians.filter(id => {
+                const custodian = ceremony.config.custodians.find(c => c.id === id);
+                return custodian?.role === CustodianRole.KEY_HOLDER;
+            });
+            if (keyHolders.length < 2) {
+                throw new Error('Dual control requires 2 key holders present for destruction');
+            }
+        }
+        try {
+            // Destroy the key
+            await this.hsm.destroyKey(ceremony.config.existingKeyId);
+            await this.addAuditEntry(ceremony, CeremonyAction.KEY_DESTROYED, undefined, {
+                keyId: ceremony.config.existingKeyId,
+            });
+            ceremony.status = CeremonyStatus.COMPLETED;
+            ceremony.completedAt = new Date();
+            await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_COMPLETED);
+            this.emit('ceremonyCompleted', ceremony);
+        }
+        catch (error) {
+            ceremony.status = CeremonyStatus.FAILED;
+            ceremony.error = error instanceof Error ? error.message : String(error);
+            await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_FAILED, undefined, {
+                error: ceremony.error,
+            });
+            this.emit('ceremonyFailed', { ceremony, error });
+            throw error;
+        }
+    }
+    /**
+     * Cancel a ceremony
+     */
+    async cancelCeremony(ceremonyId, reason) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        if (ceremony.status === CeremonyStatus.COMPLETED ||
+            ceremony.status === CeremonyStatus.CANCELLED) {
+            throw new Error(`Ceremony cannot be cancelled from status: ${ceremony.status}`);
+        }
+        ceremony.status = CeremonyStatus.CANCELLED;
+        ceremony.completedAt = new Date();
+        ceremony.error = reason;
+        await this.addAuditEntry(ceremony, CeremonyAction.CEREMONY_CANCELLED, undefined, {
+            reason,
+        });
+        this.emit('ceremonyCancelled', ceremony);
+    }
+    /**
+     * Get ceremony by ID
+     */
+    getCeremony(ceremonyId) {
+        return this.ceremonies.get(ceremonyId);
+    }
+    /**
+     * Get ceremony or throw
+     */
+    getCeremonyOrThrow(ceremonyId) {
+        const ceremony = this.ceremonies.get(ceremonyId);
+        if (!ceremony) {
+            throw new Error(`Ceremony not found: ${ceremonyId}`);
+        }
+        return ceremony;
+    }
+    /**
+     * List all ceremonies
+     */
+    listCeremonies(filter) {
+        let ceremonies = Array.from(this.ceremonies.values());
+        if (filter?.status) {
+            ceremonies = ceremonies.filter(c => c.status === filter.status);
+        }
+        if (filter?.type) {
+            ceremonies = ceremonies.filter(c => c.config.type === filter.type);
+        }
+        return ceremonies;
+    }
+    /**
+     * Get ceremony audit trail
+     */
+    getCeremonyAuditTrail(ceremonyId) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        return [...ceremony.auditTrail];
+    }
+    /**
+     * Add audit entry
+     */
+    async addAuditEntry(ceremony, action, custodianId, metadata) {
+        const entry = {
+            timestamp: new Date(),
+            action,
+            custodianId,
+            metadata: {
+                ...metadata,
+                ceremonyId: ceremony.id,
+            },
+        };
+        // Sign the entry (in real implementation, use HSM)
+        const entryData = JSON.stringify({
+            timestamp: entry.timestamp.toISOString(),
+            action: entry.action,
+            custodianId: entry.custodianId,
+            metadata: entry.metadata,
+        });
+        entry.signature = crypto.createHash('sha256').update(entryData).digest();
+        ceremony.auditTrail.push(entry);
+        if (this.auditCallback) {
+            this.auditCallback(entry);
+        }
+        this.emit('auditEntry', entry);
+    }
+    /**
+     * Export ceremony report
+     */
+    exportCeremonyReport(ceremonyId) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        const report = {
+            ceremonyId: ceremony.id,
+            type: ceremony.config.type,
+            status: ceremony.status,
+            created: ceremony.createdAt,
+            started: ceremony.startedAt,
+            completed: ceremony.completedAt,
+            configuration: {
+                totalShares: ceremony.config.totalShares,
+                requiredShares: ceremony.config.requiredShares,
+                dualControl: ceremony.config.requireDualControl,
+                witnesses: ceremony.config.requireWitnesses,
+            },
+            custodians: ceremony.config.custodians.map(c => ({
+                name: c.name,
+                role: c.role,
+                present: ceremony.presentCustodians.includes(c.id),
+                shareSubmitted: c.hasSubmittedShare,
+            })),
+            keyGenerated: ceremony.keyHandle,
+            sharesDistributed: ceremony.shares.length,
+            auditTrail: ceremony.auditTrail.map(e => ({
+                timestamp: e.timestamp,
+                action: e.action,
+                custodian: e.custodianId,
+            })),
+        };
+        return JSON.stringify(report, null, 2);
+    }
+    /**
+     * Verify ceremony integrity
+     */
+    verifyCeremonyIntegrity(ceremonyId) {
+        const ceremony = this.getCeremonyOrThrow(ceremonyId);
+        // Verify all audit entries have valid signatures
+        for (const entry of ceremony.auditTrail) {
+            if (!entry.signature)
+                continue;
+            const entryData = JSON.stringify({
+                timestamp: entry.timestamp.toISOString(),
+                action: entry.action,
+                custodianId: entry.custodianId,
+                metadata: entry.metadata,
+            });
+            const expectedSignature = crypto.createHash('sha256').update(entryData).digest();
+            if (!entry.signature.equals(expectedSignature)) {
+                return false;
+            }
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=key-ceremony.js.map

package/dist/security/hsm/key-ceremony.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-ceremony.js","sourceRoot":"","sources":["../../../src/security/hsm/key-ceremony.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAIL,OAAO,EACP,QAAQ,GAGT,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,YAWX;AAXD,WAAY,YAAY;IACtB,gCAAgC;IAChC,+DAA+C,CAAA;IAC/C,6BAA6B;IAC7B,6CAA6B,CAAA;IAC7B,gCAAgC;IAChC,6CAA6B,CAAA;IAC7B,oBAAoB;IACpB,mDAAmC,CAAA;IACnC,gCAAgC;IAChC,6CAA6B,CAAA;AAC/B,CAAC,EAXW,YAAY,KAAZ,YAAY,QAWvB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,cAQX;AARD,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,6CAA2B,CAAA;IAC3B,qDAAmC,CAAA;IACnC,uDAAqC,CAAA;IACrC,yCAAuB,CAAA;IACvB,mCAAiB,CAAA;IACjB,yCAAuB,CAAA;AACzB,CAAC,EARW,cAAc,KAAd,cAAc,QAQzB;AAgBD;;GAEG;AACH,MAAM,CAAN,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,gDAA+B,CAAA;IAC/B,0CAAyB,CAAA;IACzB,oCAAmB,CAAA;IACnB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,KAAb,aAAa,QAKxB;AAmED;;GAEG;AACH,MAAM,CAAN,IAAY,cAcX;AAdD,WAAY,cAAc;IACxB,uDAAqC,CAAA;IACrC,uDAAqC,CAAA;IACrC,yDAAuC,CAAA;IACvC,qDAAmC,CAAA;IACnC,yDAAuC,CAAA;IACvC,qDAAmC,CAAA;IACnC,mDAAiC,CAAA;IACjC,iDAA+B,CAAA;IAC/B,iDAA+B,CAAA;IAC/B,iDAA+B,CAAA;IAC/B,2DAAyC,CAAA;IACzC,qDAAmC,CAAA;IACnC,2DAAyC,CAAA;AAC3C,CAAC,EAdW,cAAc,KAAd,cAAc,QAczB;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,mBAAmB;IACf,KAAK,CAAS;IAEtB;QACE,yCAAyC;QACzC,0BAA0B;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,CACjB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAc,EAAE,WAAmB,EAAE,cAAsB;QAC/D,IAAI,cAAc,GAAG,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,2BAA2B;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAExD,8CAA8C;QAC9C,MAAM,YAAY,GAAa,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YAChF,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,+DAA+D;QAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,uCAAuC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/B,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAgB;QAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,eAAe;QACf,MAAM,MAAM,GAAoC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACpD,CAAC,CAAC,CAAC;QAEJ,+CAA+C;QAC/C,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACZ,SAAS,GAAG,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;oBACjE,WAAW,GAAG,CAAC,WAAW,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;gBACzE,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YAChD,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1D,CAAC;QAED,yBAAyB;QACzB,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAE3D,yBAAyB;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,YAAsB,EAAE,CAAS;QAC1D,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEtB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,GAAG,CAAC,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YAC9C,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3D,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,CAAS,EAAE,CAAS;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;YAC1B,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAC1C,GAAG,CAAe;IAClB,UAAU,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC9C,MAAM,CAAsB;IAC5B,aAAa,CAAuC;IAE5D,YAAY,GAAiB,EAAE,aAAmD;QAChF,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,MAAsB;QACzC,yBAAyB;QACzB,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE;YAC7B,MAAM;YACN,MAAM,EAAE,cAAc,CAAC,OAAO;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,EAAE;YACd,iBAAiB,EAAE,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE3C,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,gBAAgB,EAAE,SAAS,EAAE;YAC7E,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAAsB;QACnD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,UAAU,CACzC,CAAC;QAEF,IAAI,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,MAAM,CAAC,kBAAkB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,OAAO,CACtC,CAAC;YACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,OAAO,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,2CAA2C;QAC3C,IAAI,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,OAAO,CACtC,CAAC;YACF,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC5C,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1C,CAAC;YAEF,IAAI,gBAAgB,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACvC,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC;QAC7C,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAEhC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAEpE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,UAAkB,EAClB,WAAmB,EACnB,gBAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,uDAAuD;QACvD,IAAI,SAAS,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;YAC5C,uEAAuE;QACzE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAElF,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,0BAA0B,CAAC,UAAkB;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,qBAAqB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC;YACH,6BAA6B;YAC7B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEtE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,aAAa,EAAE,SAAS,EAAE;gBAC1E,KAAK,EAAE,SAAS,CAAC,EAAE;gBACnB,OAAO,EAAE,SAAS,CAAC,IAAI;aACxB,CAAC,CAAC;YAEH,yCAAyC;YACzC,8EAA8E;YAC9E,MAAM,OAAO,GAAY;gBACvB,KAAK,EAAE,OAAO,SAAS,CAAC,EAAE,EAAE;gBAC5B,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,GAAG;gBACT,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACvC,WAAW,EAAE,IAAI,EAAE,4BAA4B;aAChD,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAEhD,oEAAoE;YACpE,wDAAwD;YACxD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;YAExD,iCAAiC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAC9B,WAAW,EACX,QAAQ,CAAC,MAAM,CAAC,WAAW,EAC3B,QAAQ,CAAC,MAAM,CAAC,cAAc,CAC/B,CAAC;YAEF,kCAAkC;YAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,UAAU,CACzC,CAAC;YAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBAExB,yDAAyD;gBACzD,IAAI,cAAsB,CAAC;gBAC3B,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;wBACvC,GAAG,EAAE,SAAS,CAAC,SAAS;wBACxB,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,MAAM;qBACb,CAAC,CAAC;oBACH,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,gDAAgD;oBAChD,cAAc,GAAG,KAAK,CAAC;gBACzB,CAAC;gBAED,MAAM,QAAQ,GAAa;oBACzB,KAAK,EAAE,CAAC,GAAG,CAAC;oBACZ,WAAW,EAAE,SAAS,CAAC,EAAE;oBACzB,cAAc;oBACd,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBACjE,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;gBAEF,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/B,SAAS,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;gBAE7B,MAAM,IAAI,CAAC,aAAa,CACtB,QAAQ,EACR,cAAc,CAAC,iBAAiB,EAChC,SAAS,CAAC,EAAE,EACZ,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CACtB,CAAC;YACJ,CAAC;YAED,8CAA8C;YAC9C,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAElC,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC;YAC3C,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;YAElC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,kBAAkB,EAAE,SAAS,EAAE;gBAC/E,KAAK,EAAE,SAAS,CAAC,EAAE;gBACnB,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;aAC1C,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;YAEzC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;YACxC,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAExE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,eAAe,EAAE,SAAS,EAAE;gBAC5E,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,UAAkB,EAClB,WAAmB,EACnB,cAAsB;QAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,IACE,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,WAAW;YAC9C,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,eAAe,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,4BAA4B;QAC5B,MAAM,KAAK,GAAa;YACtB,KAAK,EAAE,SAAS,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACzD,WAAW;YACX,cAAc;YACd,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1E,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,SAAS,CAAC,iBAAiB,GAAG,IAAI,CAAC;QACnC,SAAS,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAEnC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,eAAe,EAAE,WAAW,EAAE;YAC9E,UAAU,EAAE,KAAK,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,iCAAiC;QACjC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CACtD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CACzB,CAAC,MAAM,CAAC;QAET,IAAI,cAAc,IAAI,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACrD,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,eAAe,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,UAAkB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,gBAAgB,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,YAAY,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC;YACH,uEAAuE;YACvE,MAAM,eAAe,GAAa,QAAQ,CAAC,MAAM;iBAC9C,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;iBACxC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAEtC,yBAAyB;YACzB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;YAE9D,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;YAEjE,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC;YAC3C,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;YAElC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAEtE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;YAEzC,OAAO,YAAY,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;YACxC,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAExE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,eAAe,EAAE,SAAS,EAAE;gBAC5E,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,UAAkB;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,eAAe,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,kCAAkC;QAClC,IAAI,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;gBACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpE,OAAO,SAAS,EAAE,IAAI,KAAK,aAAa,CAAC,UAAU,CAAC;YACtD,CAAC,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB;YAClB,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAEzD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,aAAa,EAAE,SAAS,EAAE;gBAC1E,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa;aACrC,CAAC,CAAC;YAEH,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC;YAC3C,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;YAElC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAEtE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;YACxC,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAExE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,eAAe,EAAE,SAAS,EAAE;gBAC5E,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,MAAe;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,IACE,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,SAAS;YAC5C,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,SAAS,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC;QAC3C,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC;QAExB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,kBAAkB,EAAE,SAAS,EAAE;YAC/E,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,UAAkB;QAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,UAAkB;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAyD;QACtE,IAAI,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAEtD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;YACjB,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,UAAkB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,QAAkB,EAClB,MAAsB,EACtB,WAAoB,EACpB,QAAkC;QAElC,MAAM,KAAK,GAAuB;YAChC,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM;YACN,WAAW;YACX,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB;SACF,CAAC;QAEF,mDAAmD;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAEzE,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,UAAkB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,QAAQ,CAAC,SAAS;YAC3B,OAAO,EAAE,QAAQ,CAAC,SAAS;YAC3B,SAAS,EAAE,QAAQ,CAAC,WAAW;YAC/B,aAAa,EAAE;gBACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW;gBACxC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc;gBAC9C,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB;gBAC/C,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB;aAC5C;YACD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,cAAc,EAAE,CAAC,CAAC,iBAAiB;aACpC,CAAC,CAAC;YACH,YAAY,EAAE,QAAQ,CAAC,SAAS;YAChC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;YACzC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,WAAW;aACzB,CAAC,CAAC;SACJ,CAAC;QAEF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,UAAkB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAErD,iDAAiD;QACjD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,SAAS;YAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC/B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YAEjF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC/C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}