@vorionsys/platform-core 0.1.0

package/dist/auth/piv-cac/certificate-mapper.js

@@ -0,0 +1,569 @@
+/**
+ * Certificate-to-User Mapping
+ *
+ * Maps X.509 certificate attributes to user identities using
+ * various strategies (UPN, SAN, Subject DN, etc.).
+ *
+ * Features:
+ * - Multiple mapping strategies
+ * - Rule-based mapping with priority
+ * - DoD EDIPI extraction
+ * - Custom attribute mapping
+ * - Tenant assignment
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../../common/logger.js';
+import { CertificateMappingStrategy, PIVErrorCode, } from './types.js';
+const logger = createLogger({ component: 'piv-certificate-mapper' });
+// =============================================================================
+// Constants
+// =============================================================================
+/** OID for User Principal Name (UPN) in SAN */
+const OID_UPN = '1.3.6.1.4.1.311.20.2.3';
+/** DoD EDIPI pattern in Subject DN serialNumber */
+const EDIPI_PATTERN = /^\d{10}$/;
+/** Email pattern */
+const EMAIL_PATTERN = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/;
+// =============================================================================
+// Error Classes
+// =============================================================================
+/**
+ * Certificate mapping error
+ */
+export class CertificateMappingError extends Error {
+    code;
+    details;
+    constructor(message, code = PIVErrorCode.USER_MAPPING_FAILED, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'CertificateMappingError';
+    }
+}
+/**
+ * No matching rule error
+ */
+export class NoMatchingRuleError extends CertificateMappingError {
+    constructor(certificate) {
+        super('No mapping rule matched the certificate', PIVErrorCode.USER_MAPPING_FAILED, {
+            subject: certificate.subject.full,
+            issuer: certificate.issuer.full,
+        });
+        this.name = 'NoMatchingRuleError';
+    }
+}
+/**
+ * Attribute not found error
+ */
+export class AttributeNotFoundError extends CertificateMappingError {
+    constructor(attribute, strategy) {
+        super(`Required attribute "${attribute}" not found in certificate for strategy "${strategy}"`, PIVErrorCode.USER_MAPPING_FAILED, { attribute, strategy });
+        this.name = 'AttributeNotFoundError';
+    }
+}
+// =============================================================================
+// Certificate Mapper Service
+// =============================================================================
+/**
+ * Certificate to user identity mapper
+ */
+export class CertificateMapper {
+    rules = [];
+    customMappers = new Map();
+    constructor(rules = []) {
+        this.rules = [...rules].sort((a, b) => a.priority - b.priority);
+    }
+    /**
+     * Map a certificate to a user identity
+     */
+    mapCertificate(certificate) {
+        logger.debug({
+            subject: certificate.subject.CN,
+            issuer: certificate.issuer.CN,
+            serialNumber: certificate.serialNumber,
+        }, 'Mapping certificate to user identity');
+        // Try each rule in priority order
+        for (const rule of this.rules) {
+            if (this.ruleMatches(certificate, rule)) {
+                try {
+                    const identity = this.applyRule(certificate, rule);
+                    logger.info({
+                        userId: identity.userId,
+                        rule: rule.name,
+                        strategy: rule.strategy,
+                    }, 'Certificate mapped successfully');
+                    return identity;
+                }
+                catch (error) {
+                    logger.debug({ rule: rule.name, error }, 'Rule matched but mapping failed, trying next rule');
+                    continue;
+                }
+            }
+        }
+        // No rule matched - try default strategies
+        const defaultIdentity = this.tryDefaultStrategies(certificate);
+        if (defaultIdentity) {
+            return defaultIdentity;
+        }
+        throw new NoMatchingRuleError(certificate);
+    }
+    /**
+     * Check if a rule matches the certificate
+     */
+    ruleMatches(certificate, rule) {
+        // Check issuer pattern
+        if (rule.issuerPattern) {
+            const regex = new RegExp(rule.issuerPattern, 'i');
+            if (!regex.test(certificate.issuer.full)) {
+                return false;
+            }
+        }
+        // Check subject pattern
+        if (rule.subjectPattern) {
+            const regex = new RegExp(rule.subjectPattern, 'i');
+            if (!regex.test(certificate.subject.full)) {
+                return false;
+            }
+        }
+        // Check required policy OID
+        if (rule.requiredPolicyOid) {
+            const hasPolicy = certificate.extensions.some((ext) => ext.oid === '2.5.29.32' && ext.value.includes(rule.requiredPolicyOid));
+            if (!hasPolicy) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /**
+     * Apply a mapping rule to extract user identity
+     */
+    applyRule(certificate, rule) {
+        let identity;
+        switch (rule.strategy) {
+            case CertificateMappingStrategy.UPN:
+                identity = this.mapByUPN(certificate);
+                break;
+            case CertificateMappingStrategy.SAN:
+                identity = this.mapBySAN(certificate);
+                break;
+            case CertificateMappingStrategy.EMAIL:
+                identity = this.mapByEmail(certificate);
+                break;
+            case CertificateMappingStrategy.SUBJECT_DN:
+                identity = this.mapBySubjectDN(certificate, rule.userIdAttribute);
+                break;
+            case CertificateMappingStrategy.SERIAL_ISSUER:
+                identity = this.mapBySerialIssuer(certificate);
+                break;
+            case CertificateMappingStrategy.CUSTOM:
+                const customMapper = this.customMappers.get(rule.name);
+                if (!customMapper) {
+                    throw new CertificateMappingError(`Custom mapper "${rule.name}" not registered`);
+                }
+                const customIdentity = customMapper(certificate);
+                if (!customIdentity) {
+                    throw new CertificateMappingError(`Custom mapper "${rule.name}" returned no identity`);
+                }
+                identity = customIdentity;
+                break;
+            default:
+                throw new CertificateMappingError(`Unknown mapping strategy: ${rule.strategy}`);
+        }
+        // Apply tenant ID from rule
+        if (rule.tenantId) {
+            identity.tenantId = rule.tenantId;
+        }
+        // Apply custom attribute mappings
+        if (rule.attributeMappings) {
+            for (const [targetAttr, sourceAttr] of Object.entries(rule.attributeMappings)) {
+                const value = this.extractAttribute(certificate, sourceAttr);
+                if (value) {
+                    identity.attributes[targetAttr] = value;
+                }
+            }
+        }
+        identity.mappingStrategy = rule.strategy;
+        return identity;
+    }
+    /**
+     * Try default mapping strategies
+     */
+    tryDefaultStrategies(certificate) {
+        // Try UPN first
+        try {
+            return this.mapByUPN(certificate);
+        }
+        catch {
+            // Continue to next strategy
+        }
+        // Try email
+        try {
+            return this.mapByEmail(certificate);
+        }
+        catch {
+            // Continue to next strategy
+        }
+        // Try SAN
+        try {
+            return this.mapBySAN(certificate);
+        }
+        catch {
+            // Continue to next strategy
+        }
+        // Try Subject DN with CN
+        try {
+            return this.mapBySubjectDN(certificate, 'CN');
+        }
+        catch {
+            // Continue to next strategy
+        }
+        return undefined;
+    }
+    /**
+     * Map by User Principal Name (UPN) in SAN
+     */
+    mapByUPN(certificate) {
+        // Find UPN in SAN
+        const upnEntry = certificate.subjectAltNames.find((san) => san.type === 'upn' || san.oid === OID_UPN);
+        if (!upnEntry) {
+            throw new AttributeNotFoundError('UPN', CertificateMappingStrategy.UPN);
+        }
+        const upn = upnEntry.value;
+        // Extract username and domain from UPN (format: user@domain)
+        const [username, domain] = upn.split('@');
+        return {
+            userId: upn,
+            username,
+            email: upn, // UPN is often the same as email
+            upn,
+            edipi: this.extractEDIPI(certificate),
+            tenantId: domain,
+            attributes: {
+                domain: domain || '',
+                cn: certificate.subject.CN || '',
+            },
+            mappingStrategy: CertificateMappingStrategy.UPN,
+            certificateFingerprint: certificate.fingerprint,
+        };
+    }
+    /**
+     * Map by Subject Alternative Name (SAN)
+     */
+    mapBySAN(certificate) {
+        if (certificate.subjectAltNames.length === 0) {
+            throw new AttributeNotFoundError('SAN', CertificateMappingStrategy.SAN);
+        }
+        // Priority: email > upn > dns > uri
+        let userId;
+        let email;
+        let upn;
+        for (const san of certificate.subjectAltNames) {
+            switch (san.type) {
+                case 'email':
+                    email = san.value;
+                    if (!userId)
+                        userId = san.value;
+                    break;
+                case 'upn':
+                    upn = san.value;
+                    if (!userId)
+                        userId = san.value;
+                    break;
+                case 'dns':
+                    if (!userId)
+                        userId = san.value;
+                    break;
+                case 'uri':
+                    if (!userId)
+                        userId = san.value;
+                    break;
+            }
+        }
+        if (!userId) {
+            userId = certificate.subjectAltNames[0]?.value;
+        }
+        if (!userId) {
+            throw new AttributeNotFoundError('SAN value', CertificateMappingStrategy.SAN);
+        }
+        return {
+            userId,
+            username: email?.split('@')[0] || upn?.split('@')[0],
+            email,
+            upn,
+            edipi: this.extractEDIPI(certificate),
+            attributes: {
+                cn: certificate.subject.CN || '',
+                sanCount: String(certificate.subjectAltNames.length),
+            },
+            mappingStrategy: CertificateMappingStrategy.SAN,
+            certificateFingerprint: certificate.fingerprint,
+        };
+    }
+    /**
+     * Map by email address
+     */
+    mapByEmail(certificate) {
+        // Try SAN email first
+        const emailSan = certificate.subjectAltNames.find((san) => san.type === 'email');
+        let email = emailSan?.value;
+        // Try Subject E attribute
+        if (!email) {
+            email = certificate.subject.E;
+        }
+        // Try to extract from CN
+        if (!email && certificate.subject.CN) {
+            const cnMatch = certificate.subject.CN.match(EMAIL_PATTERN);
+            if (cnMatch) {
+                email = cnMatch[0];
+            }
+        }
+        if (!email) {
+            throw new AttributeNotFoundError('email', CertificateMappingStrategy.EMAIL);
+        }
+        const [username, domain] = email.split('@');
+        return {
+            userId: email,
+            username,
+            email,
+            edipi: this.extractEDIPI(certificate),
+            tenantId: domain,
+            attributes: {
+                domain: domain || '',
+                cn: certificate.subject.CN || '',
+            },
+            mappingStrategy: CertificateMappingStrategy.EMAIL,
+            certificateFingerprint: certificate.fingerprint,
+        };
+    }
+    /**
+     * Map by Subject Distinguished Name attribute
+     */
+    mapBySubjectDN(certificate, attribute) {
+        const attr = attribute || 'CN';
+        const value = attr === 'CN'
+            ? certificate.subject.CN
+            : attr === 'serialNumber'
+                ? certificate.subject.serialNumber
+                : attr === 'E'
+                    ? certificate.subject.E
+                    : attr === 'OU'
+                        ? certificate.subject.OU
+                        : attr === 'O'
+                            ? certificate.subject.O
+                            : undefined;
+        if (!value) {
+            throw new AttributeNotFoundError(attr, CertificateMappingStrategy.SUBJECT_DN);
+        }
+        // Try to extract email from CN if it looks like an email
+        let email;
+        if (attr === 'CN' && EMAIL_PATTERN.test(value)) {
+            email = value;
+        }
+        return {
+            userId: value,
+            username: value,
+            email,
+            edipi: this.extractEDIPI(certificate),
+            attributes: {
+                subjectDN: certificate.subject.full,
+                mappedAttribute: attr,
+                organization: certificate.subject.O || '',
+                organizationalUnit: certificate.subject.OU || '',
+            },
+            mappingStrategy: CertificateMappingStrategy.SUBJECT_DN,
+            certificateFingerprint: certificate.fingerprint,
+        };
+    }
+    /**
+     * Map by certificate serial number and issuer
+     */
+    mapBySerialIssuer(certificate) {
+        const userId = `${certificate.serialNumber}@${certificate.issuer.CN || certificate.issuer.O || 'unknown'}`;
+        return {
+            userId,
+            attributes: {
+                serialNumber: certificate.serialNumber,
+                issuerDN: certificate.issuer.full,
+                subjectDN: certificate.subject.full,
+            },
+            mappingStrategy: CertificateMappingStrategy.SERIAL_ISSUER,
+            certificateFingerprint: certificate.fingerprint,
+        };
+    }
+    /**
+     * Extract EDIPI (DoD Electronic Data Interchange Personal Identifier) from certificate
+     */
+    extractEDIPI(certificate) {
+        // EDIPI is typically in the Subject DN serialNumber attribute
+        const serialNumber = certificate.subject.serialNumber;
+        if (serialNumber && EDIPI_PATTERN.test(serialNumber)) {
+            return serialNumber;
+        }
+        // Also check CN for EDIPI
+        const cn = certificate.subject.CN;
+        if (cn) {
+            const match = cn.match(/\b(\d{10})\b/);
+            if (match) {
+                return match[1];
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Extract a generic attribute from certificate
+     */
+    extractAttribute(certificate, attribute) {
+        // Check subject DN attributes
+        switch (attribute.toUpperCase()) {
+            case 'CN':
+                return certificate.subject.CN;
+            case 'O':
+                return certificate.subject.O;
+            case 'OU':
+                return certificate.subject.OU;
+            case 'C':
+                return certificate.subject.C;
+            case 'ST':
+                return certificate.subject.ST;
+            case 'L':
+                return certificate.subject.L;
+            case 'E':
+            case 'EMAIL':
+                return certificate.subject.E;
+            case 'SERIALNUMBER':
+                return certificate.subject.serialNumber;
+            case 'ISSUER_CN':
+                return certificate.issuer.CN;
+            case 'ISSUER_O':
+                return certificate.issuer.O;
+            case 'SERIAL':
+                return certificate.serialNumber;
+            case 'FINGERPRINT':
+                return certificate.fingerprint;
+        }
+        // Check SAN attributes
+        if (attribute.startsWith('SAN_')) {
+            const sanType = attribute.substring(4).toLowerCase();
+            const san = certificate.subjectAltNames.find((s) => s.type === sanType);
+            return san?.value;
+        }
+        return undefined;
+    }
+    /**
+     * Add a mapping rule
+     */
+    addRule(rule) {
+        this.rules.push(rule);
+        this.rules.sort((a, b) => a.priority - b.priority);
+        logger.info({ rule: rule.name, priority: rule.priority }, 'Added mapping rule');
+    }
+    /**
+     * Remove a mapping rule
+     */
+    removeRule(name) {
+        const index = this.rules.findIndex((r) => r.name === name);
+        if (index >= 0) {
+            this.rules.splice(index, 1);
+            logger.info({ rule: name }, 'Removed mapping rule');
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Get all rules
+     */
+    getRules() {
+        return [...this.rules];
+    }
+    /**
+     * Register a custom mapper function
+     */
+    registerCustomMapper(name, mapper) {
+        this.customMappers.set(name, mapper);
+        logger.info({ name }, 'Registered custom mapper');
+    }
+    /**
+     * Unregister a custom mapper
+     */
+    unregisterCustomMapper(name) {
+        const result = this.customMappers.delete(name);
+        if (result) {
+            logger.info({ name }, 'Unregistered custom mapper');
+        }
+        return result;
+    }
+}
+// =============================================================================
+// Default Rules
+// =============================================================================
+/**
+ * Default DoD CAC mapping rule
+ */
+export const DOD_CAC_RULE = {
+    name: 'dod-cac',
+    priority: 10,
+    issuerPattern: 'DOD|Department of Defense',
+    strategy: CertificateMappingStrategy.UPN,
+};
+/**
+ * Default PIV mapping rule
+ */
+export const PIV_RULE = {
+    name: 'piv-upn',
+    priority: 20,
+    requiredPolicyOid: '2.16.840.1.101.3.2.1', // id-fpki-common-authentication
+    strategy: CertificateMappingStrategy.UPN,
+};
+/**
+ * Fallback email mapping rule
+ */
+export const EMAIL_FALLBACK_RULE = {
+    name: 'email-fallback',
+    priority: 100,
+    strategy: CertificateMappingStrategy.EMAIL,
+};
+/**
+ * Fallback CN mapping rule
+ */
+export const CN_FALLBACK_RULE = {
+    name: 'cn-fallback',
+    priority: 200,
+    strategy: CertificateMappingStrategy.SUBJECT_DN,
+    userIdAttribute: 'CN',
+};
+/**
+ * Default mapping rules
+ */
+export const DEFAULT_MAPPING_RULES = [
+    DOD_CAC_RULE,
+    PIV_RULE,
+    EMAIL_FALLBACK_RULE,
+    CN_FALLBACK_RULE,
+];
+// =============================================================================
+// Singleton and Factory
+// =============================================================================
+let defaultMapper = null;
+/**
+ * Get the default certificate mapper
+ */
+export function getCertificateMapper(rules) {
+    if (!defaultMapper || rules) {
+        defaultMapper = new CertificateMapper(rules ?? DEFAULT_MAPPING_RULES);
+    }
+    return defaultMapper;
+}
+/**
+ * Create a new certificate mapper
+ */
+export function createCertificateMapper(rules = DEFAULT_MAPPING_RULES) {
+    return new CertificateMapper(rules);
+}
+/**
+ * Reset the default mapper (for testing)
+ */
+export function resetCertificateMapper() {
+    defaultMapper = null;
+}
+//# sourceMappingURL=certificate-mapper.js.map

package/dist/auth/piv-cac/certificate-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate-mapper.js","sourceRoot":"","sources":["../../../src/auth/piv-cac/certificate-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAIL,0BAA0B,EAC1B,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;AAErE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,+CAA+C;AAC/C,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAEzC,mDAAmD;AACnD,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,oBAAoB;AACpB,MAAM,aAAa,GAAG,kDAAkD,CAAC;AAEzE,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAG9B;IACA;IAHlB,YACE,OAAe,EACC,OAAqB,YAAY,CAAC,mBAAmB,EACrD,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAiD;QACrD,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,uBAAuB;IAC9D,YAAY,WAA8B;QACxC,KAAK,CACH,yCAAyC,EACzC,YAAY,CAAC,mBAAmB,EAChC;YACE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI;YACjC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI;SAChC,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,uBAAuB;IACjE,YAAY,SAAiB,EAAE,QAAoC;QACjE,KAAK,CACH,uBAAuB,SAAS,4CAA4C,QAAQ,GAAG,EACvF,YAAY,CAAC,mBAAmB,EAChC,EAAE,SAAS,EAAE,QAAQ,EAAE,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,KAAK,GAA6B,EAAE,CAAC;IACrC,aAAa,GACnB,IAAI,GAAG,EAAE,CAAC;IAEZ,YAAY,QAAkC,EAAE;QAC9C,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,WAA8B;QAC3C,MAAM,CAAC,KAAK,CACV;YACE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;YAC/B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE;YAC7B,YAAY,EAAE,WAAW,CAAC,YAAY;SACvC,EACD,sCAAsC,CACvC,CAAC;QAEF,kCAAkC;QAClC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;oBACnD,MAAM,CAAC,IAAI,CACT;wBACE,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,EACD,iCAAiC,CAClC,CAAC;oBACF,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAC1B,mDAAmD,CACpD,CAAC;oBACF,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,WAA8B,EAAE,IAA4B;QAC9E,uBAAuB;QACvB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAC3C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAkB,CAAC,CAChF,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,WAA8B,EAAE,IAA4B;QAC5E,IAAI,QAA4B,CAAC;QAEjC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,0BAA0B,CAAC,GAAG;gBACjC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACtC,MAAM;YAER,KAAK,0BAA0B,CAAC,GAAG;gBACjC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACtC,MAAM;YAER,KAAK,0BAA0B,CAAC,KAAK;gBACnC,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;gBACxC,MAAM;YAER,KAAK,0BAA0B,CAAC,UAAU;gBACxC,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;gBAClE,MAAM;YAER,KAAK,0BAA0B,CAAC,aAAa;gBAC3C,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;gBAC/C,MAAM;YAER,KAAK,0BAA0B,CAAC,MAAM;gBACpC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,IAAI,CAAC,IAAI,kBAAkB,CAC9C,CAAC;gBACJ,CAAC;gBACD,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,IAAI,CAAC,IAAI,wBAAwB,CACpD,CAAC;gBACJ,CAAC;gBACD,QAAQ,GAAG,cAAc,CAAC;gBAC1B,MAAM;YAER;gBACE,MAAM,IAAI,uBAAuB,CAC/B,6BAA6B,IAAI,CAAC,QAAQ,EAAE,CAC7C,CAAC;QACN,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;gBAC7D,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEzC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,WAA8B;QACzD,gBAAgB;QAChB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,YAAY;QACZ,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,UAAU;QACV,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,WAA8B;QAC7C,kBAAkB;QAClB,MAAM,QAAQ,GAAG,WAAW,CAAC,eAAe,CAAC,IAAI,CAC/C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CACnD,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC;QAE3B,6DAA6D;QAC7D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE1C,OAAO;YACL,MAAM,EAAE,GAAG;YACX,QAAQ;YACR,KAAK,EAAE,GAAG,EAAE,iCAAiC;YAC7C,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;YACrC,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE;gBACV,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;aACjC;YACD,eAAe,EAAE,0BAA0B,CAAC,GAAG;YAC/C,sBAAsB,EAAE,WAAW,CAAC,WAAW;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,WAA8B;QAC7C,IAAI,WAAW,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,oCAAoC;QACpC,IAAI,MAA0B,CAAC;QAC/B,IAAI,KAAyB,CAAC;QAC9B,IAAI,GAAuB,CAAC;QAE5B,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;YAC9C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,OAAO;oBACV,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;oBAClB,IAAI,CAAC,MAAM;wBAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;oBAChC,MAAM;gBACR,KAAK,KAAK;oBACR,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;oBAChB,IAAI,CAAC,MAAM;wBAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;oBAChC,MAAM;gBACR,KAAK,KAAK;oBACR,IAAI,CAAC,MAAM;wBAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;oBAChC,MAAM;gBACR,KAAK,KAAK;oBACR,IAAI,CAAC,MAAM;wBAAE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC;oBAChC,MAAM;YACV,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,KAAK;YACL,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;YACrC,UAAU,EAAE;gBACV,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;gBAChC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC;aACrD;YACD,eAAe,EAAE,0BAA0B,CAAC,GAAG;YAC/C,sBAAsB,EAAE,WAAW,CAAC,WAAW;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,WAA8B;QAC/C,sBAAsB;QACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACjF,IAAI,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;QAE5B,0BAA0B;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAChC,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5D,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,sBAAsB,CAAC,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE5C,OAAO;YACL,MAAM,EAAE,KAAK;YACb,QAAQ;YACR,KAAK;YACL,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;YACrC,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE;gBACV,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;aACjC;YACD,eAAe,EAAE,0BAA0B,CAAC,KAAK;YACjD,sBAAsB,EAAE,WAAW,CAAC,WAAW;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,WAA8B,EAC9B,SAAkB;QAElB,MAAM,IAAI,GAAG,SAAS,IAAI,IAAI,CAAC;QAE/B,MAAM,KAAK,GACT,IAAI,KAAK,IAAI;YACX,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;YACxB,CAAC,CAAC,IAAI,KAAK,cAAc;gBACvB,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY;gBAClC,CAAC,CAAC,IAAI,KAAK,GAAG;oBACZ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBACvB,CAAC,CAAC,IAAI,KAAK,IAAI;wBACb,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;wBACxB,CAAC,CAAC,IAAI,KAAK,GAAG;4BACZ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;4BACvB,CAAC,CAAC,SAAS,CAAC;QAExB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAChF,CAAC;QAED,yDAAyD;QACzD,IAAI,KAAyB,CAAC;QAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QAED,OAAO;YACL,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK;YACf,KAAK;YACL,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;YACrC,UAAU,EAAE;gBACV,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI;gBACnC,eAAe,EAAE,IAAI;gBACrB,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;gBACzC,kBAAkB,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;aACjD;YACD,eAAe,EAAE,0BAA0B,CAAC,UAAU;YACtD,sBAAsB,EAAE,WAAW,CAAC,WAAW;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,WAA8B;QACtD,MAAM,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;QAE3G,OAAO;YACL,MAAM;YACN,UAAU,EAAE;gBACV,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI;gBACjC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI;aACpC;YACD,eAAe,EAAE,0BAA0B,CAAC,aAAa;YACzD,sBAAsB,EAAE,WAAW,CAAC,WAAW;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,WAA8B;QACjD,8DAA8D;QAC9D,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC;QAEtD,IAAI,YAAY,IAAI,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,0BAA0B;QAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,WAA8B,EAAE,SAAiB;QACxE,8BAA8B;QAC9B,QAAQ,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAChC,KAAK,IAAI;gBACP,OAAO,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/B,KAAK,IAAI;gBACP,OAAO,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/B,KAAK,IAAI;gBACP,OAAO,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/B,KAAK,GAAG,CAAC;YACT,KAAK,OAAO;gBACV,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/B,KAAK,cAAc;gBACjB,OAAO,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC;YAC1C,KAAK,WAAW;gBACd,OAAO,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,KAAK,UAAU;gBACb,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,KAAK,QAAQ;gBACX,OAAO,WAAW,CAAC,YAAY,CAAC;YAClC,KAAK,aAAa;gBAChB,OAAO,WAAW,CAAC,WAAW,CAAC;QACnC,CAAC;QAED,uBAAuB;QACvB,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YACxE,OAAO,GAAG,EAAE,KAAK,CAAC;QACpB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAA4B;QAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC3D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,oBAAoB,CAClB,IAAY,EACZ,MAAmE;QAEnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,IAAY;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,2BAA2B;IAC1C,QAAQ,EAAE,0BAA0B,CAAC,GAAG;CACzC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAA2B;IAC9C,IAAI,EAAE,SAAS;IACf,QAAQ,EAAE,EAAE;IACZ,iBAAiB,EAAE,sBAAsB,EAAE,gCAAgC;IAC3E,QAAQ,EAAE,0BAA0B,CAAC,GAAG;CACzC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IACzD,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,0BAA0B,CAAC,KAAK;CAC3C,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA2B;IACtD,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,0BAA0B,CAAC,UAAU;IAC/C,eAAe,EAAE,IAAI;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6B;IAC7D,YAAY;IACZ,QAAQ;IACR,mBAAmB;IACnB,gBAAgB;CACjB,CAAC;AAEF,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,IAAI,aAAa,GAA6B,IAAI,CAAC;AAEnD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,IAAI,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC;QAC5B,aAAa,GAAG,IAAI,iBAAiB,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAkC,qBAAqB;IAEvD,OAAO,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC"}