@vorionsys/platform-core 0.1.0

package/dist/security/mfa/mfa-service.js

@@ -0,0 +1,509 @@
+/* eslint-disable @typescript-eslint/ban-ts-comment */
+/**
+ * MFA Service
+ *
+ * Core MFA service providing TOTP enrollment, verification, challenge management,
+ * and backup code operations. Implements RFC 6238 TOTP standard.
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../../common/logger.js';
+import { encrypt, decrypt } from '../../common/encryption.js';
+import { ValidationError, NotFoundError, ConflictError } from '../../common/errors.js';
+import { getTOTPService } from '../../auth/mfa/totp.js';
+import { getMfaStore } from './mfa-store.js';
+import { MfaMethod, MfaStatus, MFA_DEFAULTS, mfaServiceConfigSchema, } from './types.js';
+import { getSecurityAuditLogger, } from '../../audit/security-logger.js';
+const logger = createLogger({ component: 'mfa-service' });
+/**
+ * Build security actor for MFA operations
+ */
+function buildMfaActor(userId, tenantId, clientIp) {
+    return {
+        type: 'user',
+        id: userId,
+        tenantId,
+        ip: clientIp ?? undefined,
+    };
+}
+// =============================================================================
+// MFA Service Error Classes
+// =============================================================================
+/**
+ * Base MFA error
+ */
+export class MfaError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = 'MfaError';
+        this.code = code;
+    }
+}
+/**
+ * Error when enrollment has expired
+ */
+export class EnrollmentExpiredError extends MfaError {
+    constructor() {
+        super('MFA enrollment has expired', 'MFA_ENROLLMENT_EXPIRED');
+        this.name = 'EnrollmentExpiredError';
+    }
+}
+/**
+ * Error when challenge has expired
+ */
+export class ChallengeExpiredError extends MfaError {
+    constructor() {
+        super('MFA challenge has expired', 'MFA_CHALLENGE_EXPIRED');
+        this.name = 'ChallengeExpiredError';
+    }
+}
+/**
+ * Error when too many attempts have been made
+ */
+export class TooManyAttemptsError extends MfaError {
+    constructor() {
+        super('Too many verification attempts', 'MFA_TOO_MANY_ATTEMPTS');
+        this.name = 'TooManyAttemptsError';
+    }
+}
+// =============================================================================
+// MFA Service Class
+// =============================================================================
+/**
+ * MFA Service for managing multi-factor authentication
+ */
+export class MfaService {
+    config;
+    store;
+    totpService;
+    securityLogger;
+    constructor(config, store, totpService, securityLogger) {
+        // Parse config with defaults and cast to required type
+        const parsed = mfaServiceConfigSchema.parse(config ?? {});
+        this.config = {
+            issuer: parsed.issuer ?? 'Vorion',
+            backupCodeCount: parsed.backupCodeCount ?? MFA_DEFAULTS.BACKUP_CODE_COUNT,
+            enrollmentExpiryMs: parsed.enrollmentExpiryMs ?? MFA_DEFAULTS.ENROLLMENT_EXPIRY_MS,
+            challengeExpiryMs: parsed.challengeExpiryMs ?? MFA_DEFAULTS.CHALLENGE_EXPIRY_MS,
+            maxAttempts: parsed.maxAttempts ?? MFA_DEFAULTS.MAX_ATTEMPTS,
+            gracePeriodMs: parsed.gracePeriodMs ?? MFA_DEFAULTS.GRACE_PERIOD_MS,
+            encryptSecrets: parsed.encryptSecrets ?? true,
+        };
+        this.store = store ?? getMfaStore();
+        this.totpService = totpService ?? getTOTPService({ issuer: this.config.issuer });
+        this.securityLogger = securityLogger ?? getSecurityAuditLogger();
+        logger.info({ issuer: this.config.issuer }, 'MFA service initialized');
+    }
+    // ---------------------------------------------------------------------------
+    // Enrollment Operations
+    // ---------------------------------------------------------------------------
+    /**
+     * Start MFA enrollment for a user
+     *
+     * Generates a new TOTP secret and QR code for authenticator app setup.
+     * The enrollment must be verified and completed within the enrollment period.
+     */
+    async enrollUser(userId, tenantId, email) {
+        logger.info({ userId, tenantId }, 'Starting MFA enrollment');
+        // Security audit log enrollment start
+        const actor = buildMfaActor(userId, tenantId);
+        await this.securityLogger.logMfaEnrollmentStarted(actor, userId);
+        // Check if user already has MFA enabled
+        const existing = await this.store.getUserMfa(userId, tenantId);
+        if (existing && existing.status === MfaStatus.ACTIVE) {
+            throw new ConflictError('MFA is already enabled for this user', {
+                userId,
+                status: existing.status,
+            });
+        }
+        // If there's a pending enrollment, delete it and start fresh
+        if (existing && existing.status === MfaStatus.PENDING) {
+            await this.store.deleteUserMfa(userId, tenantId);
+        }
+        // Generate new TOTP secret
+        const totpSecret = this.totpService.generateTOTPSecret(userId, email);
+        // Generate QR code
+        const qrCode = await this.totpService.generateQRCode(totpSecret.otpauthUrl);
+        // Encrypt the secret if configured
+        let storedSecret;
+        if (this.config.encryptSecrets) {
+            const envelope = encrypt(totpSecret.secret);
+            storedSecret = JSON.stringify(envelope);
+        }
+        else {
+            storedSecret = totpSecret.secret;
+        }
+        // Create user MFA record
+        const record = await this.store.createUserMfa({
+            userId,
+            tenantId,
+            totpSecret: storedSecret,
+            totpSecretEncrypted: this.config.encryptSecrets,
+        });
+        // Update expiry time based on config
+        const expiresAt = new Date(Date.now() + this.config.enrollmentExpiryMs);
+        await this.store.updateEnrollmentExpiry(record.id, expiresAt);
+        return {
+            secret: totpSecret.secret,
+            otpauthUrl: totpSecret.otpauthUrl,
+            qrCode,
+            expiresAt: expiresAt.toISOString(),
+        };
+    }
+    /**
+     * Verify TOTP code during enrollment
+     *
+     * Validates that the user has correctly configured their authenticator app.
+     */
+    async verifyEnrollment(userId, tenantId, code) {
+        logger.info({ userId, tenantId }, 'Verifying MFA enrollment');
+        const record = await this.store.getUserMfa(userId, tenantId);
+        if (!record) {
+            throw new NotFoundError('MFA enrollment not found', { userId, tenantId });
+        }
+        if (record.status !== MfaStatus.PENDING) {
+            throw new ValidationError('MFA enrollment is not in pending state', {
+                userId,
+                status: record.status,
+            });
+        }
+        // Check enrollment expiry
+        if (record.enrollmentExpiresAt && new Date() > record.enrollmentExpiresAt) {
+            throw new EnrollmentExpiredError();
+        }
+        // Get the TOTP secret
+        const secret = this.decryptSecret(record);
+        // Verify the code
+        const isValid = await this.totpService.verifyToken(secret, code);
+        // Security audit log enrollment verification
+        const actor = buildMfaActor(userId, tenantId);
+        await this.securityLogger.logMfaEnrollmentVerified(actor, userId, isValid);
+        logger.info({ userId, tenantId, verified: isValid }, 'Enrollment verification result');
+        return isValid;
+    }
+    /**
+     * Complete MFA enrollment
+     *
+     * Activates MFA and generates backup codes for account recovery.
+     */
+    async completeEnrollment(userId, tenantId) {
+        logger.info({ userId, tenantId }, 'Completing MFA enrollment');
+        const record = await this.store.getUserMfa(userId, tenantId);
+        if (!record) {
+            throw new NotFoundError('MFA enrollment not found', { userId, tenantId });
+        }
+        if (record.status !== MfaStatus.PENDING) {
+            throw new ValidationError('MFA enrollment is not in pending state', {
+                userId,
+                status: record.status,
+            });
+        }
+        // Generate backup codes
+        const backupCodes = this.totpService.generateBackupCodes(this.config.backupCodeCount);
+        const codeHashes = backupCodes.map((code) => this.totpService.hashBackupCode(code));
+        // Calculate grace period end
+        const gracePeriodEndsAt = new Date(Date.now() + this.config.gracePeriodMs);
+        // Activate MFA
+        const activatedRecord = await this.store.activateUserMfa(record.id, gracePeriodEndsAt);
+        if (!activatedRecord) {
+            throw new Error('Failed to activate MFA');
+        }
+        // Store backup codes
+        await this.store.createBackupCodes(record.id, codeHashes);
+        // Security audit log enrollment completion
+        const actor = buildMfaActor(userId, tenantId);
+        await this.securityLogger.logMfaEnrolled(actor, userId, backupCodes.length);
+        logger.info({ userId, tenantId, backupCodeCount: backupCodes.length }, 'MFA enrollment completed');
+        return {
+            backupCodes,
+            backupCodeCount: backupCodes.length,
+            enabledAt: activatedRecord.enabledAt?.toISOString() ?? new Date().toISOString(),
+            gracePeriodEndsAt: gracePeriodEndsAt.toISOString(),
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Challenge Operations
+    // ---------------------------------------------------------------------------
+    /**
+     * Create an MFA challenge for login verification
+     */
+    async createChallenge(userId, sessionId, tenantId) {
+        logger.info({ userId, sessionId }, 'Creating MFA challenge');
+        const expiresAt = new Date(Date.now() + this.config.challengeExpiryMs);
+        const challenge = await this.store.createChallenge({
+            userId,
+            sessionId,
+            expiresAt,
+            maxAttempts: this.config.maxAttempts,
+        });
+        // Security audit log challenge creation
+        if (tenantId) {
+            const actor = buildMfaActor(userId, tenantId);
+            await this.securityLogger.logMfaChallengeCreated(actor, userId, challenge.id);
+        }
+        return {
+            challengeToken: challenge.challengeToken,
+            expiresAt: challenge.expiresAt.toISOString(),
+            attemptsRemaining: challenge.maxAttempts - challenge.attempts,
+        };
+    }
+    /**
+     * Verify an MFA challenge with TOTP code or backup code
+     */
+    async verifyChallenge(challengeToken, code, tenantId, clientIp) {
+        logger.info({ challengeToken: challengeToken.slice(0, 8) }, 'Verifying MFA challenge');
+        // Get challenge
+        const challenge = await this.store.getChallengeByToken(challengeToken);
+        if (!challenge) {
+            throw new NotFoundError('MFA challenge not found');
+        }
+        // Check expiry
+        if (new Date() > challenge.expiresAt) {
+            throw new ChallengeExpiredError();
+        }
+        // Check if already verified
+        if (challenge.verified) {
+            return {
+                verified: true,
+                method: MfaMethod.TOTP,
+            };
+        }
+        // Check attempts
+        if (challenge.attempts >= challenge.maxAttempts) {
+            // Security audit log too many attempts
+            const actor = buildMfaActor(challenge.userId, tenantId, clientIp);
+            await this.securityLogger.logMfaTooManyAttempts(actor, challenge.userId, challenge.attempts);
+            throw new TooManyAttemptsError();
+        }
+        // Increment attempts
+        await this.store.incrementChallengeAttempts(challenge.id);
+        const attemptsRemaining = challenge.maxAttempts - challenge.attempts - 1;
+        // Get user MFA record
+        const userMfa = await this.store.getUserMfa(challenge.userId, tenantId);
+        if (!userMfa || userMfa.status !== MfaStatus.ACTIVE) {
+            return {
+                verified: false,
+                method: null,
+                attemptsRemaining,
+                error: 'MFA not enabled for this user',
+            };
+        }
+        // Try TOTP verification first
+        const secret = this.decryptSecret(userMfa);
+        const actor = buildMfaActor(challenge.userId, tenantId, clientIp);
+        if (await this.totpService.verifyToken(secret, code)) {
+            await this.store.markChallengeVerified(challenge.id);
+            // Security audit log successful TOTP verification
+            await this.securityLogger.logMfaVerification(actor, challenge.userId, true, 'totp');
+            logger.info({ userId: challenge.userId }, 'MFA challenge verified via TOTP');
+            return {
+                verified: true,
+                method: MfaMethod.TOTP,
+            };
+        }
+        // Try backup code verification
+        const backupResult = await this.verifyBackupCode(userMfa.id, code, clientIp ?? null);
+        if (backupResult) {
+            await this.store.markChallengeVerified(challenge.id);
+            // Get remaining backup codes count
+            const remainingCodes = await this.store.getUnusedBackupCodeCount(userMfa.id);
+            // Security audit log backup code used
+            await this.securityLogger.logMfaBackupCodeUsed(actor, challenge.userId, remainingCodes);
+            await this.securityLogger.logMfaVerification(actor, challenge.userId, true, 'backup_code');
+            logger.info({ userId: challenge.userId }, 'MFA challenge verified via backup code');
+            return {
+                verified: true,
+                method: MfaMethod.BACKUP_CODES,
+            };
+        }
+        // Security audit log failed verification
+        await this.securityLogger.logMfaVerification(actor, challenge.userId, false, 'unknown', attemptsRemaining);
+        logger.info({ userId: challenge.userId, attemptsRemaining }, 'MFA challenge verification failed');
+        return {
+            verified: false,
+            method: null,
+            attemptsRemaining,
+            error: 'Invalid verification code',
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Backup Code Operations
+    // ---------------------------------------------------------------------------
+    /**
+     * Verify a backup code
+     */
+    async verifyBackupCode(userMfaId, code, clientIp) {
+        const unusedCodes = await this.store.getUnusedBackupCodes(userMfaId);
+        const inputHash = this.totpService.hashBackupCode(code);
+        for (const backupCode of unusedCodes) {
+            if (this.timingSafeCompare(inputHash, backupCode.codeHash)) {
+                await this.store.markBackupCodeUsed(backupCode.id, clientIp);
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Regenerate backup codes
+     */
+    async regenerateBackupCodes(userId, tenantId) {
+        logger.info({ userId, tenantId }, 'Regenerating backup codes');
+        const record = await this.store.getUserMfa(userId, tenantId);
+        if (!record) {
+            throw new NotFoundError('MFA not found for user', { userId, tenantId });
+        }
+        if (record.status !== MfaStatus.ACTIVE) {
+            throw new ValidationError('MFA is not active', { userId, status: record.status });
+        }
+        // Delete existing backup codes
+        await this.store.deleteBackupCodes(record.id);
+        // Generate new backup codes
+        const backupCodes = this.totpService.generateBackupCodes(this.config.backupCodeCount);
+        const codeHashes = backupCodes.map((code) => this.totpService.hashBackupCode(code));
+        // Store new backup codes
+        await this.store.createBackupCodes(record.id, codeHashes);
+        // Security audit log backup codes regeneration
+        const actor = buildMfaActor(userId, tenantId);
+        await this.securityLogger.logMfaBackupCodesRegenerated(actor, userId, backupCodes.length);
+        logger.info({ userId, tenantId, count: backupCodes.length }, 'Backup codes regenerated');
+        return {
+            backupCodes,
+            backupCodeCount: backupCodes.length,
+            generatedAt: new Date().toISOString(),
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Status and Disable Operations
+    // ---------------------------------------------------------------------------
+    /**
+     * Get MFA status for a user
+     */
+    async getMfaStatus(userId, tenantId) {
+        const record = await this.store.getUserMfa(userId, tenantId);
+        if (!record) {
+            return {
+                enabled: false,
+                status: MfaStatus.DISABLED,
+                enabledAt: null,
+                enrollmentPending: false,
+                backupCodesRemaining: 0,
+                inGracePeriod: false,
+                gracePeriodEndsAt: null,
+            };
+        }
+        const backupCodesRemaining = record.status === MfaStatus.ACTIVE
+            ? await this.store.getUnusedBackupCodeCount(record.id)
+            : 0;
+        const now = new Date();
+        const inGracePeriod = record.status === MfaStatus.ACTIVE &&
+            record.gracePeriodEndsAt !== null &&
+            now < record.gracePeriodEndsAt;
+        return {
+            enabled: record.status === MfaStatus.ACTIVE,
+            status: record.status,
+            enabledAt: record.enabledAt?.toISOString() ?? null,
+            enrollmentPending: record.status === MfaStatus.PENDING,
+            backupCodesRemaining,
+            inGracePeriod,
+            gracePeriodEndsAt: record.gracePeriodEndsAt?.toISOString() ?? null,
+        };
+    }
+    /**
+     * Disable MFA for a user
+     */
+    async disableMfa(userId, tenantId, reason) {
+        logger.info({ userId, tenantId }, 'Disabling MFA');
+        const record = await this.store.getUserMfa(userId, tenantId);
+        if (!record) {
+            throw new NotFoundError('MFA not found for user', { userId, tenantId });
+        }
+        // Delete the MFA record (cascade deletes backup codes)
+        await this.store.deleteUserMfa(userId, tenantId);
+        // Security audit log MFA disabled
+        const actor = buildMfaActor(userId, tenantId);
+        await this.securityLogger.logMfaDisabled(actor, userId, reason);
+        logger.info({ userId, tenantId }, 'MFA disabled');
+    }
+    /**
+     * Check if user needs to complete MFA
+     */
+    async requiresMfa(userId, tenantId, sessionId) {
+        const record = await this.store.getUserMfa(userId, tenantId);
+        // No MFA configured
+        if (!record || record.status !== MfaStatus.ACTIVE) {
+            return false;
+        }
+        // Check grace period
+        const now = new Date();
+        if (record.gracePeriodEndsAt && now < record.gracePeriodEndsAt) {
+            return false;
+        }
+        // Check if session is already verified
+        const isVerified = await this.store.isSessionVerified(userId, sessionId);
+        return !isVerified;
+    }
+    // ---------------------------------------------------------------------------
+    // Utility Methods
+    // ---------------------------------------------------------------------------
+    /**
+     * Decrypt TOTP secret from storage
+     */
+    decryptSecret(record) {
+        if (!record.totpSecret) {
+            throw new Error('TOTP secret not found');
+        }
+        if (record.totpSecretEncrypted) {
+            const envelope = JSON.parse(record.totpSecret);
+            return decrypt(envelope);
+        }
+        return record.totpSecret;
+    }
+    /**
+     * Timing-safe string comparison
+     */
+    timingSafeCompare(a, b) {
+        if (a.length !== b.length) {
+            return false;
+        }
+        const bufferA = Buffer.from(a, 'utf8');
+        const bufferB = Buffer.from(b, 'utf8');
+        try {
+            const crypto = require('node:crypto');
+            return crypto.timingSafeEqual(bufferA, bufferB);
+        }
+        catch {
+            let result = 0;
+            for (let i = 0; i < bufferA.length; i++) {
+                result |= bufferA[i] ^ bufferB[i];
+            }
+            return result === 0;
+        }
+    }
+}
+// =============================================================================
+// Singleton Instance
+// =============================================================================
+let mfaServiceInstance = null;
+/**
+ * Get the singleton MFA service instance
+ */
+export function getMfaService(config) {
+    if (!mfaServiceInstance) {
+        mfaServiceInstance = new MfaService(config);
+    }
+    return mfaServiceInstance;
+}
+/**
+ * Reset the singleton instance (for testing)
+ */
+export function resetMfaService() {
+    mfaServiceInstance = null;
+}
+/**
+ * Create a new MFA service with custom dependencies (for testing)
+ */
+export function createMfaService(config, store, totpService, securityLogger) {
+    return new MfaService(config, store, totpService, securityLogger);
+}
+//# sourceMappingURL=mfa-service.js.map

package/dist/security/mfa/mfa-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-service.js","sourceRoot":"","sources":["../../../src/security/mfa/mfa-service.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,OAAO,EAA0B,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAqB,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAe,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAY,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAWL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AAGxC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAE1D;;GAEG;AACH,SAAS,aAAa,CACpB,MAAc,EACd,QAAgB,EAChB,QAAwB;IAExB,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,MAAM;QACV,QAAQ;QACR,EAAE,EAAE,QAAQ,IAAI,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEb,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,QAAQ;IAClD;QACE,KAAK,CAAC,4BAA4B,EAAE,wBAAwB,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,QAAQ;IACjD;QACE,KAAK,CAAC,2BAA2B,EAAE,uBAAuB,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,QAAQ;IAChD;QACE,KAAK,CAAC,gCAAgC,EAAE,uBAAuB,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,UAAU;IACJ,MAAM,CAAmB;IACzB,KAAK,CAAW;IAChB,WAAW,CAAc;IACzB,cAAc,CAAsB;IAErD,YACE,MAAkC,EAClC,KAAgB,EAChB,WAAyB,EACzB,cAAoC;QAEpC,uDAAuD;QACvD,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,YAAY,CAAC,iBAAiB;YACzE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,YAAY,CAAC,oBAAoB;YAClF,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,YAAY,CAAC,mBAAmB;YAC/E,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,YAAY,CAAC,YAAY;YAC5D,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,YAAY,CAAC,eAAe;YACnE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;SAC9C,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,cAAc,GAAG,cAAc,IAAI,sBAAsB,EAAE,CAAC;QAEjE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACzE,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAgB,EAAE,KAAa;QAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAE7D,sCAAsC;QACtC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEjE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACrD,MAAM,IAAI,aAAa,CAAC,sCAAsC,EAAE;gBAC9D,MAAM;gBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;QAED,6DAA6D;QAC7D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;QAED,2BAA2B;QAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEtE,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAE5E,mCAAmC;QACnC,IAAI,YAAoB,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5C,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC;QACnC,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YAC5C,MAAM;YACN,QAAQ;YACR,UAAU,EAAE,YAAY;YACxB,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;SAChD,CAAC,CAAC;QAEH,qCAAqC;QACrC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAE9D,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,MAAM;YACN,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,QAAgB,EAAE,IAAY;QACnE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,wCAAwC,EAAE;gBAClE,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,IAAI,MAAM,CAAC,mBAAmB,IAAI,IAAI,IAAI,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC1E,MAAM,IAAI,sBAAsB,EAAE,CAAC;QACrC,CAAC;QAED,sBAAsB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAE1C,kBAAkB;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEjE,6CAA6C;QAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAE3E,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,gCAAgC,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,QAAgB;QAEhB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,wCAAwC,EAAE;gBAClE,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACtF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpF,6BAA6B;QAC7B,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAE3E,eAAe;QACf,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACvF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAE1D,2CAA2C;QAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAE5E,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,EACzD,0BAA0B,CAC3B,CAAC;QAEF,OAAO;YACL,WAAW;YACX,eAAe,EAAE,WAAW,CAAC,MAAM;YACnC,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC/E,iBAAiB,EAAE,iBAAiB,CAAC,WAAW,EAAE;SACnD,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,SAAiB,EAAE,QAAiB;QACxE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAEvE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YACjD,MAAM;YACN,SAAS;YACT,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SACrC,CAAC,CAAC;QAEH,wCAAwC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO;YACL,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;YAC5C,iBAAiB,EAAE,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,QAAQ;SAC9D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,cAAsB,EACtB,IAAY,EACZ,QAAgB,EAChB,QAAiB;QAEjB,MAAM,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAEvF,gBAAgB;QAChB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CAAC,yBAAyB,CAAC,CAAC;QACrD,CAAC;QAED,eAAe;QACf,IAAI,IAAI,IAAI,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACpC,CAAC;QAED,4BAA4B;QAC5B,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,SAAS,CAAC,IAAI;aACvB,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAChD,uCAAuC;YACvC,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC7F,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,iBAAiB,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC;QAEzE,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,IAAI;gBACZ,iBAAiB;gBACjB,KAAK,EAAE,+BAA+B;aACvC,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAElE,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAErD,kDAAkD;YAClD,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAEpF,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC7E,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,SAAS,CAAC,IAAI;aACvB,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;QACrF,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAErD,mCAAmC;YACnC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE7E,sCAAsC;YACtC,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACxF,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAE3F,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,wCAAwC,CAAC,CAAC;YACpF,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,SAAS,CAAC,YAAY;aAC/B,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAE3G,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAC/C,mCAAmC,CACpC,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,iBAAiB;YACjB,KAAK,EAAE,2BAA2B;SACnC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAE9E;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,SAAiB,EACjB,IAAY,EACZ,QAAuB;QAEvB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAExD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,MAAc,EACd,QAAgB;QAEhB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,+BAA+B;QAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE9C,4BAA4B;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACtF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpF,yBAAyB;QACzB,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAE1D,+CAA+C;QAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,4BAA4B,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1F,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAEzF,OAAO;YACL,WAAW;YACX,eAAe,EAAE,WAAW,CAAC,MAAM;YACnC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,gCAAgC;IAChC,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,QAAgB;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,SAAS,CAAC,QAAQ;gBAC1B,SAAS,EAAE,IAAI;gBACf,iBAAiB,EAAE,KAAK;gBACxB,oBAAoB,EAAE,CAAC;gBACvB,aAAa,EAAE,KAAK;gBACpB,iBAAiB,EAAE,IAAI;aACxB,CAAC;QACJ,CAAC;QAED,MAAM,oBAAoB,GACxB,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YAChC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,CAAC,CAAC,CAAC,CAAC;QAER,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YAClC,MAAM,CAAC,iBAAiB,KAAK,IAAI;YACjC,GAAG,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAEjC,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;YAClD,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO;YACtD,oBAAoB;YACpB,aAAa;YACb,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,WAAW,EAAE,IAAI,IAAI;SACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAgB,EAAE,MAAe;QAChE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,eAAe,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,uDAAuD;QACvD,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEjD,kCAAkC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAEhE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,cAAc,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,QAAgB,EAAE,SAAiB;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE7D,oBAAoB;QACpB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qBAAqB;QACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,iBAAiB,IAAI,GAAG,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uCAAuC;QACvC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzE,OAAO,CAAC,UAAU,CAAC;IACrB,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E;;OAEG;IACK,aAAa,CAAC,MAAqB;QACzC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAsB,CAAC;YACpE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,CAAS,EAAE,CAAS;QAC5C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,MAAM,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,IAAI,kBAAkB,GAAsB,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAkC;IAC9D,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,kBAAkB,GAAG,IAAI,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkC,EAClC,KAAgB,EAChB,WAAyB,EACzB,cAAoC;IAEpC,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AACpE,CAAC"}