@vorionsys/platform-core 0.1.0

package/dist/security/hsm/key-operations.js

@@ -0,0 +1,625 @@
+/**
+ * Key Operations Module
+ *
+ * Provides high-level cryptographic operations using HSM-backed keys.
+ * This module abstracts common key management patterns for:
+ * - Key generation with FIPS 140-3 compliant algorithms
+ * - Digital signatures (ECDSA, RSA-PSS, Ed25519)
+ * - Envelope encryption with automatic key wrapping
+ * - Key derivation (HKDF, PBKDF2)
+ * - Secure key import/export
+ *
+ * @module security/hsm/key-operations
+ */
+import * as crypto from 'crypto';
+import { EventEmitter } from 'events';
+import { KeyType, KeyUsage, ECCurve, EncryptionAlgorithm, SigningAlgorithm, HSMKeyNotFoundError, } from './provider';
+// ============================================================================
+// Types
+// ============================================================================
+/**
+ * Key purpose for automatic key specification
+ */
+export var KeyPurpose;
+(function (KeyPurpose) {
+    /** Data encryption at rest */
+    KeyPurpose["DATA_ENCRYPTION"] = "DATA_ENCRYPTION";
+    /** Key wrapping (KEK) */
+    KeyPurpose["KEY_WRAPPING"] = "KEY_WRAPPING";
+    /** Digital signatures */
+    KeyPurpose["SIGNING"] = "SIGNING";
+    /** Message authentication codes */
+    KeyPurpose["MAC"] = "MAC";
+    /** Key derivation */
+    KeyPurpose["KEY_DERIVATION"] = "KEY_DERIVATION";
+    /** TLS/mTLS certificates */
+    KeyPurpose["TLS_CERTIFICATE"] = "TLS_CERTIFICATE";
+    /** Code signing */
+    KeyPurpose["CODE_SIGNING"] = "CODE_SIGNING";
+    /** Document signing */
+    KeyPurpose["DOCUMENT_SIGNING"] = "DOCUMENT_SIGNING";
+    /** JWT/JWS signing */
+    KeyPurpose["JWT_SIGNING"] = "JWT_SIGNING";
+    /** Root CA key */
+    KeyPurpose["ROOT_CA"] = "ROOT_CA";
+    /** Intermediate CA key */
+    KeyPurpose["INTERMEDIATE_CA"] = "INTERMEDIATE_CA";
+})(KeyPurpose || (KeyPurpose = {}));
+/**
+ * FIPS 140-3 compliance level
+ */
+export var FIPSComplianceLevel;
+(function (FIPSComplianceLevel) {
+    /** Level 1: Software implementation */
+    FIPSComplianceLevel[FIPSComplianceLevel["LEVEL_1"] = 1] = "LEVEL_1";
+    /** Level 2: Tamper-evident hardware */
+    FIPSComplianceLevel[FIPSComplianceLevel["LEVEL_2"] = 2] = "LEVEL_2";
+    /** Level 3: Tamper-resistant hardware with identity authentication */
+    FIPSComplianceLevel[FIPSComplianceLevel["LEVEL_3"] = 3] = "LEVEL_3";
+    /** Level 4: Complete physical security envelope */
+    FIPSComplianceLevel[FIPSComplianceLevel["LEVEL_4"] = 4] = "LEVEL_4";
+})(FIPSComplianceLevel || (FIPSComplianceLevel = {}));
+// ============================================================================
+// FIPS-Compliant Key Specifications
+// ============================================================================
+/**
+ * Get FIPS 140-3 compliant key specification for a given purpose
+ */
+export function getFIPSKeySpec(purpose, label, options) {
+    const baseSpec = {
+        label,
+        id: options?.id,
+        extractable: options?.exportable ?? false,
+        expiresAt: options?.expiresAt,
+        attributes: options?.attributes,
+    };
+    switch (purpose) {
+        case KeyPurpose.DATA_ENCRYPTION:
+            return {
+                ...baseSpec,
+                type: KeyType.AES,
+                size: 256, // AES-256 for FIPS compliance
+                usage: [KeyUsage.ENCRYPT, KeyUsage.DECRYPT],
+            };
+        case KeyPurpose.KEY_WRAPPING:
+            return {
+                ...baseSpec,
+                type: KeyType.AES,
+                size: 256, // AES-256-KWP
+                usage: [KeyUsage.WRAP, KeyUsage.UNWRAP],
+            };
+        case KeyPurpose.SIGNING:
+        case KeyPurpose.CODE_SIGNING:
+        case KeyPurpose.DOCUMENT_SIGNING:
+            return {
+                ...baseSpec,
+                type: KeyType.EC,
+                curve: ECCurve.P384, // ECDSA P-384 for FIPS 186-5
+                usage: [KeyUsage.SIGN, KeyUsage.VERIFY],
+            };
+        case KeyPurpose.JWT_SIGNING:
+            return {
+                ...baseSpec,
+                type: KeyType.EC,
+                curve: ECCurve.P256, // ES256 is widely supported
+                usage: [KeyUsage.SIGN, KeyUsage.VERIFY],
+            };
+        case KeyPurpose.MAC:
+            return {
+                ...baseSpec,
+                type: KeyType.HMAC,
+                size: 256, // HMAC-SHA256
+                usage: [KeyUsage.SIGN, KeyUsage.VERIFY],
+            };
+        case KeyPurpose.KEY_DERIVATION:
+            return {
+                ...baseSpec,
+                type: KeyType.AES,
+                size: 256,
+                usage: [KeyUsage.DERIVE],
+            };
+        case KeyPurpose.TLS_CERTIFICATE:
+            return {
+                ...baseSpec,
+                type: KeyType.EC,
+                curve: ECCurve.P256, // Widely compatible for TLS
+                usage: [KeyUsage.SIGN, KeyUsage.VERIFY],
+            };
+        case KeyPurpose.ROOT_CA:
+            return {
+                ...baseSpec,
+                type: KeyType.RSA,
+                size: 4096, // RSA-4096 for long-lived root CAs
+                usage: [KeyUsage.SIGN, KeyUsage.VERIFY],
+            };
+        case KeyPurpose.INTERMEDIATE_CA:
+            return {
+                ...baseSpec,
+                type: KeyType.EC,
+                curve: ECCurve.P384, // ECDSA P-384 for intermediate CAs
+                usage: [KeyUsage.SIGN, KeyUsage.VERIFY],
+            };
+        default:
+            throw new Error(`Unknown key purpose: ${purpose}`);
+    }
+}
+// ============================================================================
+// Key Operations Service
+// ============================================================================
+/**
+ * High-level key operations service
+ */
+export class KeyOperationsService extends EventEmitter {
+    hsm;
+    metrics;
+    keyCache = new Map();
+    kekId = null;
+    constructor(hsm) {
+        super();
+        this.hsm = hsm;
+        this.metrics = {
+            totalOperations: 0,
+            operationsByType: {},
+            averageLatencyMs: {},
+            failureCount: 0,
+            lastOperation: null,
+        };
+    }
+    /**
+     * Initialize the service with a master KEK
+     */
+    async initialize(masterKekLabel = 'vorion-master-kek') {
+        // Try to find existing KEK
+        const existingKeys = await this.hsm.listKeys({ label: masterKekLabel });
+        if (existingKeys.length > 0) {
+            this.kekId = existingKeys[0].id;
+        }
+        else {
+            // Generate new master KEK
+            const kekSpec = getFIPSKeySpec(KeyPurpose.KEY_WRAPPING, masterKekLabel);
+            const kek = await this.hsm.generateKey(kekSpec);
+            this.kekId = kek.id;
+        }
+        this.emit('initialized', { kekId: this.kekId });
+    }
+    // ============================================================================
+    // Key Generation
+    // ============================================================================
+    /**
+     * Generate a key for a specific purpose with FIPS-compliant parameters
+     */
+    async generateKey(options) {
+        const startTime = Date.now();
+        const operationType = 'generateKey';
+        try {
+            const spec = getFIPSKeySpec(options.purpose, options.label, options);
+            // Verify FIPS compliance level if specified
+            if (options.minFIPSLevel && options.minFIPSLevel >= FIPSComplianceLevel.LEVEL_3) {
+                if (!this.hsm.isProduction) {
+                    throw new Error(`FIPS Level ${options.minFIPSLevel} requires production HSM, but SoftHSM is being used`);
+                }
+            }
+            const keyHandle = await this.hsm.generateKey(spec);
+            // Cache the key handle
+            this.keyCache.set(keyHandle.id, keyHandle);
+            this.updateMetrics(operationType, Date.now() - startTime, true);
+            this.emit('keyGenerated', { keyHandle, purpose: options.purpose });
+            return keyHandle;
+        }
+        catch (error) {
+            this.updateMetrics(operationType, Date.now() - startTime, false);
+            throw error;
+        }
+    }
+    /**
+     * Generate a signing key pair (ECDSA or RSA)
+     */
+    async generateSigningKey(label, algorithm = 'ECDSA', options) {
+        const spec = {
+            label,
+            id: options?.id,
+            extractable: options?.exportable ?? false,
+            expiresAt: options?.expiresAt,
+            usage: [KeyUsage.SIGN, KeyUsage.VERIFY],
+            type: algorithm === 'RSA' ? KeyType.RSA : KeyType.EC,
+            ...(algorithm === 'RSA'
+                ? { size: 2048 }
+                : algorithm === 'Ed25519'
+                    ? { curve: ECCurve.ED25519 }
+                    : { curve: ECCurve.P256 }),
+        };
+        return this.hsm.generateKey(spec);
+    }
+    /**
+     * Generate an encryption key (AES-256)
+     */
+    async generateEncryptionKey(label, options) {
+        return this.generateKey({
+            ...options,
+            purpose: KeyPurpose.DATA_ENCRYPTION,
+            label,
+        });
+    }
+    // ============================================================================
+    // Envelope Encryption
+    // ============================================================================
+    /**
+     * Envelope encryption: encrypt data with a random DEK, then wrap DEK with KEK
+     */
+    async envelopeEncrypt(data, kekId, aad) {
+        const startTime = Date.now();
+        const operationType = 'envelopeEncrypt';
+        try {
+            const actualKekId = kekId || this.kekId;
+            if (!actualKekId) {
+                throw new Error('No KEK available. Initialize the service first.');
+            }
+            // Generate a random Data Encryption Key (DEK)
+            const dek = crypto.randomBytes(32); // AES-256
+            const iv = crypto.randomBytes(12); // GCM IV
+            // Encrypt data with DEK using AES-256-GCM
+            const cipher = crypto.createCipheriv('aes-256-gcm', dek, iv);
+            if (aad) {
+                cipher.setAAD(aad);
+            }
+            const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
+            const authTag = cipher.getAuthTag();
+            // Wrap the DEK with the KEK in the HSM
+            // First, import the DEK temporarily
+            const dekHandle = await this.hsm.importKey(dek, {
+                label: `ephemeral-dek-${Date.now()}`,
+                type: KeyType.AES,
+                size: 256,
+                usage: [KeyUsage.ENCRYPT, KeyUsage.DECRYPT],
+                extractable: true, // Must be extractable to wrap
+            });
+            // Wrap the DEK
+            const encryptedDEK = await this.hsm.wrapKey(actualKekId, dekHandle.id);
+            // Destroy the temporary DEK
+            await this.hsm.destroyKey(dekHandle.id);
+            // Securely zero the DEK in memory
+            crypto.randomFillSync(dek);
+            const result = {
+                ciphertext: encrypted,
+                encryptedDEK,
+                kekId: actualKekId,
+                iv,
+                authTag,
+                algorithm: 'AES-256-GCM',
+            };
+            this.updateMetrics(operationType, Date.now() - startTime, true);
+            this.emit('envelopeEncrypted', { kekId: actualKekId, dataLength: data.length });
+            return result;
+        }
+        catch (error) {
+            this.updateMetrics(operationType, Date.now() - startTime, false);
+            throw error;
+        }
+    }
+    /**
+     * Envelope decryption: unwrap DEK with KEK, then decrypt data
+     */
+    async envelopeDecrypt(envelope, aad) {
+        const startTime = Date.now();
+        const operationType = 'envelopeDecrypt';
+        try {
+            // Unwrap the DEK using the KEK in the HSM
+            const dekId = await this.hsm.unwrapKey(envelope.kekId, envelope.encryptedDEK, {
+                label: `unwrapped-dek-${Date.now()}`,
+                type: KeyType.AES,
+                size: 256,
+                usage: [KeyUsage.ENCRYPT, KeyUsage.DECRYPT],
+                extractable: false,
+            });
+            // Decrypt the data using the HSM
+            const fullCiphertext = Buffer.concat([
+                envelope.iv,
+                envelope.authTag,
+                envelope.ciphertext,
+            ]);
+            const plaintext = await this.hsm.decrypt(dekId, fullCiphertext, {
+                algorithm: EncryptionAlgorithm.AES_GCM,
+                aad,
+            });
+            // Destroy the temporary DEK
+            await this.hsm.destroyKey(dekId);
+            this.updateMetrics(operationType, Date.now() - startTime, true);
+            return plaintext;
+        }
+        catch (error) {
+            this.updateMetrics(operationType, Date.now() - startTime, false);
+            throw error;
+        }
+    }
+    // ============================================================================
+    // Signing Operations
+    // ============================================================================
+    /**
+     * Sign data using a key in the HSM
+     */
+    async sign(keyId, data, options) {
+        const startTime = Date.now();
+        const operationType = 'sign';
+        try {
+            const key = await this.getKey(keyId);
+            if (!key) {
+                throw new HSMKeyNotFoundError(keyId);
+            }
+            // Determine algorithm based on key type
+            let algorithm = options?.algorithm;
+            if (!algorithm) {
+                algorithm = this.getDefaultSigningAlgorithm(key);
+            }
+            // Pre-hash if requested
+            let dataToSign = data;
+            if (options?.preHash) {
+                const hashAlg = options.hashAlgorithm || 'SHA-256';
+                const hash = crypto.createHash(hashAlg.replace('-', '').toLowerCase());
+                dataToSign = hash.update(data).digest();
+            }
+            const signature = await this.hsm.sign(keyId, dataToSign, algorithm);
+            this.updateMetrics(operationType, Date.now() - startTime, true);
+            this.emit('dataSigned', { keyId, dataLength: data.length });
+            return signature;
+        }
+        catch (error) {
+            this.updateMetrics(operationType, Date.now() - startTime, false);
+            throw error;
+        }
+    }
+    /**
+     * Verify a signature using a key in the HSM
+     */
+    async verify(keyId, data, signature, options) {
+        const startTime = Date.now();
+        const operationType = 'verify';
+        try {
+            const key = await this.getKey(keyId);
+            if (!key) {
+                throw new HSMKeyNotFoundError(keyId);
+            }
+            let algorithm = options?.algorithm;
+            if (!algorithm) {
+                algorithm = this.getDefaultSigningAlgorithm(key);
+            }
+            let dataToVerify = data;
+            if (options?.preHash) {
+                const hashAlg = options.hashAlgorithm || 'SHA-256';
+                const hash = crypto.createHash(hashAlg.replace('-', '').toLowerCase());
+                dataToVerify = hash.update(data).digest();
+            }
+            const valid = await this.hsm.verify(keyId, dataToVerify, signature, algorithm);
+            this.updateMetrics(operationType, Date.now() - startTime, true);
+            return valid;
+        }
+        catch (error) {
+            this.updateMetrics(operationType, Date.now() - startTime, false);
+            throw error;
+        }
+    }
+    /**
+     * Get default signing algorithm for a key type
+     */
+    getDefaultSigningAlgorithm(key) {
+        switch (key.type) {
+            case KeyType.RSA:
+                return SigningAlgorithm.RSASSA_PSS_SHA256;
+            case KeyType.EC:
+                if (key.curve === ECCurve.ED25519) {
+                    return SigningAlgorithm.ED25519;
+                }
+                return SigningAlgorithm.ECDSA_SHA256;
+            case KeyType.HMAC:
+                return SigningAlgorithm.HMAC_SHA256;
+            default:
+                throw new Error(`Cannot determine signing algorithm for key type: ${key.type}`);
+        }
+    }
+    // ============================================================================
+    // Key Derivation
+    // ============================================================================
+    /**
+     * Derive a key using HKDF or PBKDF2
+     */
+    async deriveKey(masterKeyId, params, outputKeySpec) {
+        const startTime = Date.now();
+        const operationType = 'deriveKey';
+        try {
+            const masterKey = await this.getKey(masterKeyId);
+            if (!masterKey) {
+                throw new HSMKeyNotFoundError(masterKeyId);
+            }
+            // In a real HSM, key derivation would be done inside the HSM
+            // Here we simulate it for the interface
+            // Get a reference value from the master key (would be HSM internal)
+            const masterKeyRef = await this.hsm.sign(masterKeyId, Buffer.from('key-derivation-context'), SigningAlgorithm.HMAC_SHA256);
+            let derivedMaterial;
+            if (params.algorithm.startsWith('HKDF')) {
+                derivedMaterial = this.hkdf(masterKeyRef, params.salt || Buffer.alloc(0), params.info || Buffer.alloc(0), params.outputLength, params.algorithm.replace('HKDF-', ''));
+            }
+            else {
+                // PBKDF2
+                if (!params.salt) {
+                    throw new Error('Salt is required for PBKDF2');
+                }
+                derivedMaterial = crypto.pbkdf2Sync(masterKeyRef, params.salt, params.iterations || 100000, params.outputLength, params.algorithm.replace('PBKDF2-', '').toLowerCase());
+            }
+            // Import the derived key
+            const spec = {
+                label: outputKeySpec.label || `derived-${Date.now()}`,
+                type: outputKeySpec.type || KeyType.AES,
+                size: params.outputLength * 8,
+                usage: outputKeySpec.usage || [KeyUsage.ENCRYPT, KeyUsage.DECRYPT],
+                extractable: outputKeySpec.extractable ?? false,
+            };
+            const derivedKey = await this.hsm.importKey(derivedMaterial, spec);
+            // Zero derived material
+            crypto.randomFillSync(derivedMaterial);
+            this.updateMetrics(operationType, Date.now() - startTime, true);
+            return derivedKey;
+        }
+        catch (error) {
+            this.updateMetrics(operationType, Date.now() - startTime, false);
+            throw error;
+        }
+    }
+    /**
+     * HKDF implementation
+     */
+    hkdf(ikm, salt, info, length, hash) {
+        const hashName = hash.toLowerCase();
+        const hashLength = { sha256: 32, sha384: 48, sha512: 64 }[hashName];
+        // Extract
+        const prk = crypto.createHmac(hashName, salt.length > 0 ? salt : Buffer.alloc(hashLength))
+            .update(ikm)
+            .digest();
+        // Expand
+        const n = Math.ceil(length / hashLength);
+        const okm = Buffer.alloc(n * hashLength);
+        let t = Buffer.alloc(0);
+        for (let i = 0; i < n; i++) {
+            t = crypto.createHmac(hashName, prk)
+                .update(Buffer.concat([t, info, Buffer.from([i + 1])]))
+                .digest();
+            t.copy(okm, i * hashLength);
+        }
+        return okm.subarray(0, length);
+    }
+    // ============================================================================
+    // Key Management
+    // ============================================================================
+    /**
+     * Get a key by ID
+     */
+    async getKey(keyId) {
+        // Check cache first
+        if (this.keyCache.has(keyId)) {
+            return this.keyCache.get(keyId);
+        }
+        const key = await this.hsm.getKey(keyId);
+        if (key) {
+            this.keyCache.set(keyId, key);
+        }
+        return key;
+    }
+    /**
+     * List keys by purpose
+     */
+    async listKeysByPurpose(purpose) {
+        const spec = getFIPSKeySpec(purpose, '');
+        return this.hsm.listKeys({
+            type: spec.type,
+            usage: spec.usage,
+        });
+    }
+    /**
+     * Rotate a key
+     */
+    async rotateKey(oldKeyId, newLabel) {
+        const startTime = Date.now();
+        const operationType = 'rotateKey';
+        try {
+            const oldKey = await this.getKey(oldKeyId);
+            if (!oldKey) {
+                throw new HSMKeyNotFoundError(oldKeyId);
+            }
+            // Generate new key with same spec
+            const newKeySpec = {
+                label: newLabel || `${oldKey.label}-rotated-${Date.now()}`,
+                type: oldKey.type,
+                size: oldKey.size,
+                curve: oldKey.curve,
+                usage: oldKey.usage,
+                extractable: oldKey.extractable,
+            };
+            const newKey = await this.hsm.generateKey(newKeySpec);
+            // Update cache
+            this.keyCache.set(newKey.id, newKey);
+            this.updateMetrics(operationType, Date.now() - startTime, true);
+            this.emit('keyRotated', { oldKeyId, newKeyId: newKey.id });
+            return newKey;
+        }
+        catch (error) {
+            this.updateMetrics(operationType, Date.now() - startTime, false);
+            throw error;
+        }
+    }
+    /**
+     * Export public key in various formats
+     */
+    async exportPublicKey(keyId, format = 'spki') {
+        const publicKeyDer = await this.hsm.exportPublicKey(keyId);
+        switch (format) {
+            case 'spki':
+                return publicKeyDer;
+            case 'pem':
+                const pemHeader = '-----BEGIN PUBLIC KEY-----\n';
+                const pemFooter = '\n-----END PUBLIC KEY-----';
+                const base64 = publicKeyDer.toString('base64');
+                const formatted = base64.match(/.{1,64}/g)?.join('\n') || base64;
+                return pemHeader + formatted + pemFooter;
+            case 'jwk':
+                // Parse the SPKI format and convert to JWK
+                const publicKey = crypto.createPublicKey({
+                    key: publicKeyDer,
+                    format: 'der',
+                    type: 'spki',
+                });
+                return publicKey.export({ format: 'jwk' });
+            default:
+                throw new Error(`Unsupported format: ${format}`);
+        }
+    }
+    // ============================================================================
+    // Metrics
+    // ============================================================================
+    /**
+     * Update operation metrics
+     */
+    updateMetrics(operation, latencyMs, success) {
+        this.metrics.totalOperations++;
+        this.metrics.lastOperation = new Date();
+        if (!this.metrics.operationsByType[operation]) {
+            this.metrics.operationsByType[operation] = 0;
+            this.metrics.averageLatencyMs[operation] = 0;
+        }
+        const count = this.metrics.operationsByType[operation];
+        this.metrics.operationsByType[operation] = count + 1;
+        // Update running average
+        this.metrics.averageLatencyMs[operation] =
+            (this.metrics.averageLatencyMs[operation] * count + latencyMs) / (count + 1);
+        if (!success) {
+            this.metrics.failureCount++;
+        }
+    }
+    /**
+     * Get current metrics
+     */
+    getMetrics() {
+        return { ...this.metrics };
+    }
+    /**
+     * Reset metrics
+     */
+    resetMetrics() {
+        this.metrics = {
+            totalOperations: 0,
+            operationsByType: {},
+            averageLatencyMs: {},
+            failureCount: 0,
+            lastOperation: null,
+        };
+    }
+}
+// ============================================================================
+// Factory Function
+// ============================================================================
+/**
+ * Create and initialize key operations service
+ */
+export async function createKeyOperationsService(hsm, masterKekLabel) {
+    const service = new KeyOperationsService(hsm);
+    await service.initialize(masterKekLabel);
+    return service;
+}
+//# sourceMappingURL=key-operations.js.map

package/dist/security/hsm/key-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-operations.js","sourceRoot":"","sources":["../../../src/security/hsm/key-operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAIL,OAAO,EACP,QAAQ,EACR,OAAO,EAEP,mBAAmB,EACnB,gBAAgB,EAEhB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAN,IAAY,UAuBX;AAvBD,WAAY,UAAU;IACpB,8BAA8B;IAC9B,iDAAmC,CAAA;IACnC,yBAAyB;IACzB,2CAA6B,CAAA;IAC7B,yBAAyB;IACzB,iCAAmB,CAAA;IACnB,mCAAmC;IACnC,yBAAW,CAAA;IACX,qBAAqB;IACrB,+CAAiC,CAAA;IACjC,4BAA4B;IAC5B,iDAAmC,CAAA;IACnC,mBAAmB;IACnB,2CAA6B,CAAA;IAC7B,uBAAuB;IACvB,mDAAqC,CAAA;IACrC,sBAAsB;IACtB,yCAA2B,CAAA;IAC3B,kBAAkB;IAClB,iCAAmB,CAAA;IACnB,0BAA0B;IAC1B,iDAAmC,CAAA;AACrC,CAAC,EAvBW,UAAU,KAAV,UAAU,QAuBrB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,uCAAuC;IACvC,mEAAW,CAAA;IACX,uCAAuC;IACvC,mEAAW,CAAA;IACX,sEAAsE;IACtE,mEAAW,CAAA;IACX,mDAAmD;IACnD,mEAAW,CAAA;AACb,CAAC,EATW,mBAAmB,KAAnB,mBAAmB,QAS9B;AA+ED,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAmB,EACnB,KAAa,EACb,OAAuC;IAEvC,MAAM,QAAQ,GAAqB;QACjC,KAAK;QACL,EAAE,EAAE,OAAO,EAAE,EAAE;QACf,WAAW,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;QACzC,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,UAAU,EAAE,OAAO,EAAE,UAAU;KAChC,CAAC;IAEF,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU,CAAC,eAAe;YAC7B,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,GAAG,EAAE,8BAA8B;gBACzC,KAAK,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;aACjC,CAAC;QAEf,KAAK,UAAU,CAAC,YAAY;YAC1B,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,GAAG,EAAE,cAAc;gBACzB,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC7B,CAAC;QAEf,KAAK,UAAU,CAAC,OAAO,CAAC;QACxB,KAAK,UAAU,CAAC,YAAY,CAAC;QAC7B,KAAK,UAAU,CAAC,gBAAgB;YAC9B,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,6BAA6B;gBAClD,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC7B,CAAC;QAEf,KAAK,UAAU,CAAC,WAAW;YACzB,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,4BAA4B;gBACjD,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC7B,CAAC;QAEf,KAAK,UAAU,CAAC,GAAG;YACjB,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,GAAG,EAAE,cAAc;gBACzB,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC7B,CAAC;QAEf,KAAK,UAAU,CAAC,cAAc;YAC5B,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,GAAG;gBACT,KAAK,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;aACd,CAAC;QAEf,KAAK,UAAU,CAAC,eAAe;YAC7B,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,4BAA4B;gBACjD,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC7B,CAAC;QAEf,KAAK,UAAU,CAAC,OAAO;YACrB,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,IAAI,EAAE,mCAAmC;gBAC/C,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC7B,CAAC;QAEf,KAAK,UAAU,CAAC,eAAe;YAC7B,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,OAAO,CAAC,EAAE;gBAChB,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,mCAAmC;gBACxD,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC7B,CAAC;QAEf;YACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IAC5C,GAAG,CAAe;IAClB,OAAO,CAAsB;IAC7B,QAAQ,GAA2B,IAAI,GAAG,EAAE,CAAC;IAC7C,KAAK,GAAkB,IAAI,CAAC;IAEpC,YAAY,GAAiB;QAC3B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG;YACb,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,EAAE;YACpB,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,iBAAyB,mBAAmB;QAC3D,2BAA2B;QAC3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAExE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,0BAA0B;YAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;YACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAE/E;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,OAA6B;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,aAAa,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAErE,4CAA4C;YAC5C,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC;gBAChF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,cAAc,OAAO,CAAC,YAAY,qDAAqD,CACxF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAEnD,uBAAuB;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAE3C,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAEnE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,YAAyC,OAAO,EAChD,OAAuC;QAEvC,MAAM,IAAI,GAAY;YACpB,KAAK;YACL,EAAE,EAAE,OAAO,EAAE,EAAE;YACf,WAAW,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;YACzC,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;YACvC,IAAI,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;YACpD,GAAG,CAAC,SAAS,KAAK,KAAK;gBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;gBAChB,CAAC,CAAC,SAAS,KAAK,SAAS;oBACzB,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;oBAC5B,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC7B,CAAC;QAEF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,KAAa,EACb,OAAuC;QAEvC,OAAO,IAAI,CAAC,WAAW,CAAC;YACtB,GAAG,OAAO;YACV,OAAO,EAAE,UAAU,CAAC,eAAe;YACnC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,sBAAsB;IACtB,+EAA+E;IAE/E;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,IAAY,EACZ,KAAc,EACd,GAAY;QAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,iBAAiB,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;YACxC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YAED,8CAA8C;YAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU;YAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YAE5C,0CAA0C;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,uCAAuC;YACvC,oCAAoC;YACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAC9C,KAAK,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE;gBACpC,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,GAAG;gBACT,KAAK,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;gBAC3C,WAAW,EAAE,IAAI,EAAE,8BAA8B;aAClD,CAAC,CAAC;YAEH,eAAe;YACf,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;YAEvE,4BAA4B;YAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAExC,kCAAkC;YAClC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAE3B,MAAM,MAAM,GAA6B;gBACvC,UAAU,EAAE,SAAS;gBACrB,YAAY;gBACZ,KAAK,EAAE,WAAW;gBAClB,EAAE;gBACF,OAAO;gBACP,SAAS,EAAE,aAAa;aACzB,CAAC;YAEF,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAEhF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,QAAkC,EAClC,GAAY;QAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,iBAAiB,CAAC;QAExC,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CACpC,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,YAAY,EACrB;gBACE,KAAK,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE;gBACpC,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,GAAG;gBACT,KAAK,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;gBAC3C,WAAW,EAAE,KAAK;aACnB,CACF,CAAC;YAEF,iCAAiC;YACjC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;gBACnC,QAAQ,CAAC,EAAE;gBACX,QAAQ,CAAC,OAAO;gBAChB,QAAQ,CAAC,UAAU;aACpB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE;gBAC9D,SAAS,EAAE,mBAAmB,CAAC,OAAO;gBACtC,GAAG;aACJ,CAAC,CAAC;YAEH,4BAA4B;YAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAEjC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAEhE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,qBAAqB;IACrB,+EAA+E;IAE/E;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,KAAa,EACb,IAAY,EACZ,OAA0B;QAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,MAAM,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;YAED,wCAAwC;YACxC,IAAI,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;YACnC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;YACnD,CAAC;YAED,wBAAwB;YACxB,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,IAAI,SAAS,CAAC;gBACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvE,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1C,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAEpE,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAE5D,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,OAA0B;QAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,QAAQ,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;YACnC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;YACnD,CAAC;YAED,IAAI,YAAY,GAAG,IAAI,CAAC;YACxB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,IAAI,SAAS,CAAC;gBACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvE,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAE/E,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAEhE,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,GAAc;QAC/C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,OAAO,CAAC,GAAG;gBACd,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;YAC5C,KAAK,OAAO,CAAC,EAAE;gBACb,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;oBAClC,OAAO,gBAAgB,CAAC,OAAO,CAAC;gBAClC,CAAC;gBACD,OAAO,gBAAgB,CAAC,YAAY,CAAC;YACvC,KAAK,OAAO,CAAC,IAAI;gBACf,OAAO,gBAAgB,CAAC,WAAW,CAAC;YACtC;gBACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAE/E;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,MAA2B,EAC3B,aAA+B;QAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,WAAW,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAC7C,CAAC;YAED,6DAA6D;YAC7D,wCAAwC;YAExC,oEAAoE;YACpE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CACtC,WAAW,EACX,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,EACrC,gBAAgB,CAAC,WAAW,CAC7B,CAAC;YAEF,IAAI,eAAuB,CAAC;YAE5B,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,eAAe,GAAG,IAAI,CAAC,IAAI,CACzB,YAAY,EACZ,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAC9B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAC9B,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAmC,CACxE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,SAAS;gBACT,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACjD,CAAC;gBACD,eAAe,GAAG,MAAM,CAAC,UAAU,CACjC,YAAY,EACZ,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,UAAU,IAAI,MAAM,EAC3B,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CACtD,CAAC;YACJ,CAAC;YAED,yBAAyB;YACzB,MAAM,IAAI,GAAY;gBACpB,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE;gBACrD,IAAI,EAAE,aAAa,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG;gBACvC,IAAI,EAAE,MAAM,CAAC,YAAY,GAAG,CAAC;gBAC7B,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;gBAClE,WAAW,EAAE,aAAa,CAAC,WAAW,IAAI,KAAK;aAChD,CAAC;YAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YAEnE,wBAAwB;YACxB,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAEvC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAEhE,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,IAAI,CACV,GAAW,EACX,IAAY,EACZ,IAAY,EACZ,MAAc,EACd,IAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAoC,CAAC;QACtE,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QAEpE,UAAU;QACV,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;aACvF,MAAM,CAAC,GAAG,CAAC;aACX,MAAM,EAAE,CAAC;QAEZ,SAAS;QACT,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;iBACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACtD,MAAM,EAAE,CAAC;YACZ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAE/E;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,oBAAoB;QACpB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;QACnC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAmB;QACzC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,QAAiB;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,WAAW,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,kCAAkC;YAClC,MAAM,UAAU,GAAY;gBAC1B,KAAK,EAAE,QAAQ,IAAI,GAAG,MAAM,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC1D,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAEtD,eAAe;YACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAErC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAE3D,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,SAAiC,MAAM;QAEvC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAE3D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,OAAO,YAAY,CAAC;YAEtB,KAAK,KAAK;gBACR,MAAM,SAAS,GAAG,8BAA8B,CAAC;gBACjD,MAAM,SAAS,GAAG,4BAA4B,CAAC;gBAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;gBACjE,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;YAE3C,KAAK,KAAK;gBACR,2CAA2C;gBAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;oBACvC,GAAG,EAAE,YAAY;oBACjB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAE7C;gBACE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,UAAU;IACV,+EAA+E;IAE/E;;OAEG;IACK,aAAa,CAAC,SAAiB,EAAE,SAAiB,EAAE,OAAgB;QAC1E,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC;QAExC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAErD,yBAAyB;QACzB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACtC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAE/E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,OAAO,GAAG;YACb,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,EAAE;YACpB,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAiB,EACjB,cAAuB;IAEvB,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC"}