@vorionsys/platform-core 0.1.0

package/dist/auth/piv-cac/ocsp-validator.js

@@ -0,0 +1,657 @@
+/**
+ * OCSP Certificate Validation
+ *
+ * Online Certificate Status Protocol (OCSP) validation for
+ * real-time certificate revocation checking.
+ *
+ * Features:
+ * - OCSP request generation
+ * - Response parsing and validation
+ * - Response caching
+ * - Nonce support
+ * - Soft-fail mode
+ *
+ * @packageDocumentation
+ */
+import { createHash, randomBytes } from 'crypto';
+import { createLogger } from '../../common/logger.js';
+import { PIVErrorCode, } from './types.js';
+const logger = createLogger({ component: 'piv-ocsp-validator' });
+// =============================================================================
+// Constants
+// =============================================================================
+/** OCSP response status codes */
+const OCSP_RESPONSE_STATUS = {
+    successful: 0,
+    malformedRequest: 1,
+    internalError: 2,
+    tryLater: 3,
+    sigRequired: 5,
+    unauthorized: 6,
+};
+/** Certificate status in OCSP response */
+const CERT_STATUS = {
+    good: 0,
+    revoked: 1,
+    unknown: 2,
+};
+/** Revocation reasons */
+const REVOCATION_REASONS = [
+    'unspecified',
+    'keyCompromise',
+    'cACompromise',
+    'affiliationChanged',
+    'superseded',
+    'cessationOfOperation',
+    'certificateHold',
+    'unused',
+    'removeFromCRL',
+    'privilegeWithdrawn',
+    'aACompromise',
+];
+/** Default OCSP configuration */
+const DEFAULT_OCSP_CONFIG = {
+    enabled: true,
+    timeout: 5000,
+    cacheTtl: 3600000, // 1 hour
+    signRequests: false,
+    softFail: false,
+    useNonce: true,
+};
+// =============================================================================
+// Error Classes
+// =============================================================================
+/**
+ * OCSP validation error
+ */
+export class OCSPError extends Error {
+    code;
+    details;
+    constructor(message, code = PIVErrorCode.OCSP_CHECK_FAILED, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'OCSPError';
+    }
+}
+/**
+ * OCSP responder unavailable error
+ */
+export class OCSPResponderUnavailableError extends OCSPError {
+    constructor(responderUrl, originalError) {
+        super(`OCSP responder unavailable: ${responderUrl}`, PIVErrorCode.OCSP_CHECK_FAILED, {
+            responderUrl,
+            originalError: originalError?.message,
+        });
+        this.name = 'OCSPResponderUnavailableError';
+    }
+}
+/**
+ * OCSP response error
+ */
+export class OCSPResponseError extends OCSPError {
+    constructor(message, status) {
+        super(message, PIVErrorCode.OCSP_CHECK_FAILED, { responseStatus: status });
+        this.name = 'OCSPResponseError';
+    }
+}
+// =============================================================================
+// OCSP Validator Service
+// =============================================================================
+/**
+ * OCSP validation service
+ */
+export class OCSPValidator {
+    config;
+    cache = new Map();
+    pendingRequests = new Map();
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_OCSP_CONFIG, ...config };
+    }
+    /**
+     * Check certificate revocation status via OCSP
+     */
+    async checkRevocationStatus(certificate, issuerCertificate) {
+        if (!this.config.enabled) {
+            throw new OCSPError('OCSP checking is disabled');
+        }
+        // Determine OCSP responder URL
+        const responderUrl = this.getResponderUrl(certificate);
+        if (!responderUrl) {
+            throw new OCSPError('No OCSP responder URL found in certificate');
+        }
+        // Check cache
+        const cacheKey = this.getCacheKey(certificate, responderUrl);
+        const cached = this.getCachedResponse(cacheKey);
+        if (cached) {
+            logger.debug({ serialNumber: certificate.serialNumber }, 'OCSP response served from cache');
+            return { ...cached, fromCache: true };
+        }
+        // Check for pending request
+        const pending = this.pendingRequests.get(cacheKey);
+        if (pending) {
+            logger.debug({ serialNumber: certificate.serialNumber }, 'Waiting for pending OCSP request');
+            return pending;
+        }
+        // Create and execute OCSP request
+        const requestPromise = this.executeOCSPRequest(certificate, issuerCertificate, responderUrl, cacheKey);
+        this.pendingRequests.set(cacheKey, requestPromise);
+        try {
+            return await requestPromise;
+        }
+        finally {
+            this.pendingRequests.delete(cacheKey);
+        }
+    }
+    /**
+     * Execute OCSP request
+     */
+    async executeOCSPRequest(certificate, issuerCertificate, responderUrl, cacheKey) {
+        try {
+            // Build OCSP request
+            const nonce = this.config.useNonce ? randomBytes(16) : undefined;
+            const requestData = this.buildOCSPRequest(certificate, issuerCertificate, nonce);
+            // Send request
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
+            try {
+                const response = await fetch(responderUrl, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/ocsp-request',
+                        Accept: 'application/ocsp-response',
+                    },
+                    body: new Uint8Array(requestData),
+                    signal: controller.signal,
+                });
+                clearTimeout(timeoutId);
+                if (!response.ok) {
+                    throw new OCSPResponseError(`OCSP responder returned HTTP ${response.status}`, response.status);
+                }
+                const responseData = await response.arrayBuffer();
+                const ocspResponse = this.parseOCSPResponse(Buffer.from(responseData), responderUrl, nonce);
+                // Cache the response
+                this.cacheResponse(cacheKey, ocspResponse);
+                logger.info({
+                    serialNumber: certificate.serialNumber,
+                    status: ocspResponse.status,
+                    responderUrl,
+                }, 'OCSP check completed');
+                return ocspResponse;
+            }
+            finally {
+                clearTimeout(timeoutId);
+            }
+        }
+        catch (error) {
+            if (this.config.softFail) {
+                logger.warn({ error, serialNumber: certificate.serialNumber }, 'OCSP check failed, soft-fail enabled - treating as good');
+                return {
+                    status: 'unknown',
+                    producedAt: new Date(),
+                    thisUpdate: new Date(),
+                    responderId: 'soft-fail',
+                    fromCache: false,
+                    responderUrl,
+                };
+            }
+            if (error instanceof OCSPError) {
+                throw error;
+            }
+            throw new OCSPResponderUnavailableError(responderUrl, error instanceof Error ? error : undefined);
+        }
+    }
+    /**
+     * Get OCSP responder URL from certificate
+     */
+    getResponderUrl(certificate) {
+        // Use configured URL override if set
+        if (this.config.responderUrl) {
+            return this.config.responderUrl;
+        }
+        // Get from Authority Information Access extension
+        return certificate.authorityInfoAccess?.ocsp?.[0];
+    }
+    /**
+     * Build OCSP request
+     *
+     * This is a simplified implementation. Production code should use
+     * a proper ASN.1 library for OCSP request generation.
+     */
+    buildOCSPRequest(certificate, issuerCertificate, nonce) {
+        // Calculate issuer name hash and key hash
+        const issuerNameHash = createHash('sha1')
+            .update(Buffer.from(issuerCertificate.subject.full))
+            .digest();
+        const issuerKeyHash = createHash('sha1')
+            .update(Buffer.from(issuerCertificate.publicKeyFingerprint, 'hex'))
+            .digest();
+        // Serial number as buffer
+        const serialNumber = Buffer.from(certificate.serialNumber.replace(/:/g, ''), 'hex');
+        // Build ASN.1 structure for OCSP request
+        // This is a simplified structure - full implementation needs proper ASN.1 encoding
+        const certId = this.buildCertId(issuerNameHash, issuerKeyHash, serialNumber);
+        const request = this.buildRequest(certId);
+        const tbsRequest = this.buildTBSRequest([request], nonce);
+        return this.wrapOCSPRequest(tbsRequest);
+    }
+    /**
+     * Build CertID structure
+     */
+    buildCertId(issuerNameHash, issuerKeyHash, serialNumber) {
+        // CertID ::= SEQUENCE {
+        //   hashAlgorithm AlgorithmIdentifier,
+        //   issuerNameHash OCTET STRING,
+        //   issuerKeyHash OCTET STRING,
+        //   serialNumber CertificateSerialNumber
+        // }
+        // SHA-1 OID: 1.3.14.3.2.26
+        const sha1Oid = Buffer.from([0x06, 0x05, 0x2b, 0x0e, 0x03, 0x02, 0x1a]);
+        const hashAlgorithm = this.wrapSequence(Buffer.concat([sha1Oid, Buffer.from([0x05, 0x00])]));
+        const parts = [
+            hashAlgorithm,
+            this.wrapOctetString(issuerNameHash),
+            this.wrapOctetString(issuerKeyHash),
+            this.wrapInteger(serialNumber),
+        ];
+        return this.wrapSequence(Buffer.concat(parts));
+    }
+    /**
+     * Build Request structure
+     */
+    buildRequest(certId) {
+        // Request ::= SEQUENCE {
+        //   reqCert CertID,
+        //   singleRequestExtensions [0] EXPLICIT Extensions OPTIONAL
+        // }
+        return this.wrapSequence(certId);
+    }
+    /**
+     * Build TBSRequest structure
+     */
+    buildTBSRequest(requests, nonce) {
+        // TBSRequest ::= SEQUENCE {
+        //   version [0] EXPLICIT Version DEFAULT v1,
+        //   requestorName [1] EXPLICIT GeneralName OPTIONAL,
+        //   requestList SEQUENCE OF Request,
+        //   requestExtensions [2] EXPLICIT Extensions OPTIONAL
+        // }
+        const requestList = this.wrapSequence(Buffer.concat(requests));
+        const parts = [requestList];
+        // Add nonce extension if configured
+        if (nonce) {
+            const nonceExt = this.buildNonceExtension(nonce);
+            const extensions = this.wrapSequence(nonceExt);
+            // Wrap in context-specific [2]
+            const extWrapper = Buffer.alloc(extensions.length + 2);
+            extWrapper[0] = 0xa2; // Context-specific [2]
+            extWrapper[1] = extensions.length;
+            extensions.copy(extWrapper, 2);
+            parts.push(extWrapper);
+        }
+        return this.wrapSequence(Buffer.concat(parts));
+    }
+    /**
+     * Build nonce extension
+     */
+    buildNonceExtension(nonce) {
+        // Nonce OID: 1.3.6.1.5.5.7.48.1.2
+        const nonceOid = Buffer.from([
+            0x06, 0x09, 0x2b, 0x06, 0x01, 0x05, 0x05, 0x07, 0x30, 0x01, 0x02,
+        ]);
+        const nonceValue = this.wrapOctetString(this.wrapOctetString(nonce));
+        return this.wrapSequence(Buffer.concat([nonceOid, nonceValue]));
+    }
+    /**
+     * Wrap OCSP request
+     */
+    wrapOCSPRequest(tbsRequest) {
+        // OCSPRequest ::= SEQUENCE {
+        //   tbsRequest TBSRequest,
+        //   optionalSignature [0] EXPLICIT Signature OPTIONAL
+        // }
+        return this.wrapSequence(tbsRequest);
+    }
+    /**
+     * ASN.1 SEQUENCE wrapper
+     */
+    wrapSequence(content) {
+        return this.wrapTag(0x30, content);
+    }
+    /**
+     * ASN.1 OCTET STRING wrapper
+     */
+    wrapOctetString(content) {
+        return this.wrapTag(0x04, content);
+    }
+    /**
+     * ASN.1 INTEGER wrapper
+     */
+    wrapInteger(content) {
+        // Ensure positive integer (add leading zero if needed)
+        if (content.length > 0 && content[0] >= 0x80) {
+            content = Buffer.concat([Buffer.from([0x00]), content]);
+        }
+        return this.wrapTag(0x02, content);
+    }
+    /**
+     * Generic ASN.1 tag wrapper
+     */
+    wrapTag(tag, content) {
+        const length = content.length;
+        let header;
+        if (length < 128) {
+            header = Buffer.from([tag, length]);
+        }
+        else if (length < 256) {
+            header = Buffer.from([tag, 0x81, length]);
+        }
+        else {
+            header = Buffer.from([tag, 0x82, (length >> 8) & 0xff, length & 0xff]);
+        }
+        return Buffer.concat([header, content]);
+    }
+    /**
+     * Parse OCSP response
+     *
+     * This is a simplified implementation. Production code should use
+     * a proper ASN.1 library for full response parsing.
+     */
+    parseOCSPResponse(data, responderUrl, expectedNonce) {
+        // Very simplified OCSP response parsing
+        // In production, use a proper ASN.1 parser
+        // Check response status (first few bytes of SEQUENCE)
+        if (data.length < 4) {
+            throw new OCSPResponseError('Invalid OCSP response: too short');
+        }
+        // Parse outer SEQUENCE
+        if (data[0] !== 0x30) {
+            throw new OCSPResponseError('Invalid OCSP response: not a SEQUENCE');
+        }
+        // Find responseStatus (ENUMERATED)
+        const responseStatusIndex = this.findTag(data, 0x0a, 2); // ENUMERATED
+        if (responseStatusIndex < 0) {
+            throw new OCSPResponseError('Invalid OCSP response: no responseStatus');
+        }
+        const responseStatus = data[responseStatusIndex + 2];
+        if (responseStatus !== OCSP_RESPONSE_STATUS.successful) {
+            const statusName = Object.entries(OCSP_RESPONSE_STATUS).find(([, v]) => v === responseStatus)?.[0];
+            throw new OCSPResponseError(`OCSP responder returned error: ${statusName || responseStatus}`, responseStatus);
+        }
+        // For simplicity, extract basic info
+        // A full implementation would parse the entire ASN.1 structure
+        // Try to find certStatus
+        const certStatus = this.extractCertStatus(data);
+        // Try to find timestamps
+        const timestamps = this.extractTimestamps(data);
+        const response = {
+            status: certStatus.status,
+            revocationTime: certStatus.revocationTime,
+            revocationReason: certStatus.revocationReason,
+            producedAt: timestamps.producedAt,
+            thisUpdate: timestamps.thisUpdate,
+            nextUpdate: timestamps.nextUpdate,
+            responderId: this.extractResponderId(data) || 'unknown',
+            fromCache: false,
+            responderUrl,
+        };
+        // Verify nonce if we sent one
+        if (expectedNonce && this.config.useNonce) {
+            const responseNonce = this.extractNonce(data);
+            if (responseNonce && !responseNonce.equals(expectedNonce)) {
+                logger.warn('OCSP response nonce mismatch');
+                // Some responders don't return nonce, so we log but don't fail
+            }
+        }
+        return response;
+    }
+    /**
+     * Find ASN.1 tag in buffer
+     */
+    findTag(data, tag, startOffset) {
+        for (let i = startOffset; i < data.length - 1; i++) {
+            if (data[i] === tag) {
+                return i;
+            }
+        }
+        return -1;
+    }
+    /**
+     * Extract certificate status from response
+     */
+    extractCertStatus(data) {
+        // Look for CertStatus in the response
+        // good [0] IMPLICIT NULL
+        // revoked [1] IMPLICIT RevokedInfo
+        // unknown [2] IMPLICIT UnknownInfo
+        // Search for context-specific tags [0], [1], [2] in response
+        for (let i = 0; i < data.length - 1; i++) {
+            const tag = data[i];
+            // Context-specific [0] - good
+            if (tag === 0x80) {
+                return { status: 'good' };
+            }
+            // Context-specific [1] - revoked
+            if (tag === 0xa1) {
+                const revokedInfo = this.parseRevokedInfo(data, i);
+                return {
+                    status: 'revoked',
+                    revocationTime: revokedInfo.time,
+                    revocationReason: revokedInfo.reason,
+                };
+            }
+            // Context-specific [2] - unknown
+            if (tag === 0x82) {
+                return { status: 'unknown' };
+            }
+        }
+        // Default to unknown if we can't parse
+        return { status: 'unknown' };
+    }
+    /**
+     * Parse RevokedInfo structure
+     */
+    parseRevokedInfo(data, offset) {
+        // RevokedInfo ::= SEQUENCE {
+        //   revocationTime GeneralizedTime,
+        //   revocationReason [0] EXPLICIT CRLReason OPTIONAL
+        // }
+        const result = {};
+        // Try to find GeneralizedTime (tag 0x18) near the offset
+        const timeIndex = this.findTag(data, 0x18, offset);
+        if (timeIndex > 0 && timeIndex < offset + 50) {
+            const timeLength = data[timeIndex + 1];
+            const timeStr = data.subarray(timeIndex + 2, timeIndex + 2 + timeLength).toString('ascii');
+            result.time = this.parseGeneralizedTime(timeStr);
+        }
+        // Try to find reason code
+        const reasonIndex = this.findTag(data, 0xa0, offset);
+        if (reasonIndex > 0 && reasonIndex < offset + 100) {
+            const enumIndex = this.findTag(data, 0x0a, reasonIndex);
+            if (enumIndex > 0) {
+                const reasonCode = data[enumIndex + 2];
+                if (reasonCode !== undefined && reasonCode < REVOCATION_REASONS.length) {
+                    result.reason = REVOCATION_REASONS[reasonCode];
+                }
+            }
+        }
+        return result;
+    }
+    /**
+     * Parse GeneralizedTime
+     */
+    parseGeneralizedTime(str) {
+        // Format: YYYYMMDDHHmmssZ or YYYYMMDDHHmmss.fffZ
+        const year = parseInt(str.substring(0, 4), 10);
+        const month = parseInt(str.substring(4, 6), 10) - 1;
+        const day = parseInt(str.substring(6, 8), 10);
+        const hour = parseInt(str.substring(8, 10), 10);
+        const minute = parseInt(str.substring(10, 12), 10);
+        const second = parseInt(str.substring(12, 14), 10);
+        return new Date(Date.UTC(year, month, day, hour, minute, second));
+    }
+    /**
+     * Extract timestamps from response
+     */
+    extractTimestamps(data) {
+        const now = new Date();
+        // Look for GeneralizedTime (0x18) tags
+        const times = [];
+        let offset = 0;
+        while (offset < data.length) {
+            const index = this.findTag(data, 0x18, offset);
+            if (index < 0)
+                break;
+            const length = data[index + 1];
+            const timeStr = data.subarray(index + 2, index + 2 + length).toString('ascii');
+            try {
+                times.push(this.parseGeneralizedTime(timeStr));
+            }
+            catch {
+                // Skip invalid time
+            }
+            offset = index + 2 + length;
+        }
+        return {
+            producedAt: times[0] || now,
+            thisUpdate: times[1] || times[0] || now,
+            nextUpdate: times[2],
+        };
+    }
+    /**
+     * Extract responder ID from response
+     */
+    extractResponderId(data) {
+        // Look for responderId which could be byName or byKey
+        // This is simplified - full implementation would parse ASN.1 properly
+        return undefined;
+    }
+    /**
+     * Extract nonce from response
+     */
+    extractNonce(data) {
+        // Look for nonce extension OID: 1.3.6.1.5.5.7.48.1.2
+        const nonceOidBytes = [0x2b, 0x06, 0x01, 0x05, 0x05, 0x07, 0x30, 0x01, 0x02];
+        for (let i = 0; i < data.length - nonceOidBytes.length; i++) {
+            let found = true;
+            for (let j = 0; j < nonceOidBytes.length; j++) {
+                if (data[i + j] !== nonceOidBytes[j]) {
+                    found = false;
+                    break;
+                }
+            }
+            if (found) {
+                // Nonce value should follow the OID
+                const valueOffset = i + nonceOidBytes.length + 2; // Skip OID and length bytes
+                if (valueOffset < data.length) {
+                    const valueLength = data[valueOffset - 1];
+                    if (valueOffset + valueLength <= data.length) {
+                        return data.subarray(valueOffset, valueOffset + valueLength);
+                    }
+                }
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Get cache key for certificate
+     */
+    getCacheKey(certificate, responderUrl) {
+        return `${certificate.issuer.full}:${certificate.serialNumber}:${responderUrl}`;
+    }
+    /**
+     * Get cached response if valid
+     */
+    getCachedResponse(cacheKey) {
+        const entry = this.cache.get(cacheKey);
+        if (!entry)
+            return undefined;
+        if (new Date() >= entry.expiresAt) {
+            this.cache.delete(cacheKey);
+            return undefined;
+        }
+        return entry.response;
+    }
+    /**
+     * Cache OCSP response
+     */
+    cacheResponse(cacheKey, response) {
+        // Determine cache expiration
+        let expiresAt;
+        if (response.nextUpdate) {
+            // Use nextUpdate from response
+            expiresAt = new Date(Math.min(response.nextUpdate.getTime(), Date.now() + this.config.cacheTtl));
+        }
+        else {
+            // Use configured TTL
+            expiresAt = new Date(Date.now() + this.config.cacheTtl);
+        }
+        this.cache.set(cacheKey, { response, expiresAt });
+        // Clean up old entries
+        this.cleanupCache();
+    }
+    /**
+     * Clean up expired cache entries
+     */
+    cleanupCache() {
+        const now = new Date();
+        for (const [key, entry] of this.cache.entries()) {
+            if (now >= entry.expiresAt) {
+                this.cache.delete(key);
+            }
+        }
+    }
+    /**
+     * Clear cache
+     */
+    clearCache() {
+        this.cache.clear();
+    }
+    /**
+     * Update configuration
+     */
+    updateConfig(config) {
+        this.config = { ...this.config, ...config };
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+    /**
+     * Get cache statistics
+     */
+    getCacheStats() {
+        return {
+            size: this.cache.size,
+            entries: Array.from(this.cache.keys()),
+        };
+    }
+}
+// =============================================================================
+// Singleton and Factory
+// =============================================================================
+let defaultValidator = null;
+/**
+ * Get the default OCSP validator
+ */
+export function getOCSPValidator(config) {
+    if (!defaultValidator || config) {
+        defaultValidator = new OCSPValidator(config);
+    }
+    return defaultValidator;
+}
+/**
+ * Create a new OCSP validator
+ */
+export function createOCSPValidator(config = {}) {
+    return new OCSPValidator(config);
+}
+/**
+ * Reset the default validator (for testing)
+ */
+export function resetOCSPValidator() {
+    defaultValidator = null;
+}
+//# sourceMappingURL=ocsp-validator.js.map

package/dist/auth/piv-cac/ocsp-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocsp-validator.js","sourceRoot":"","sources":["../../../src/auth/piv-cac/ocsp-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAIL,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAEjE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,iCAAiC;AACjC,MAAM,oBAAoB,GAAG;IAC3B,UAAU,EAAE,CAAC;IACb,gBAAgB,EAAE,CAAC;IACnB,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;IACd,YAAY,EAAE,CAAC;CACP,CAAC;AAEX,0CAA0C;AAC1C,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;CACF,CAAC;AAEX,yBAAyB;AACzB,MAAM,kBAAkB,GAAG;IACzB,aAAa;IACb,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB,YAAY;IACZ,sBAAsB;IACtB,iBAAiB;IACjB,QAAQ;IACR,eAAe;IACf,oBAAoB;IACpB,cAAc;CACN,CAAC;AAEX,iCAAiC;AACjC,MAAM,mBAAmB,GAAe;IACtC,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,OAAO,EAAE,SAAS;IAC5B,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,IAAI;CACf,CAAC;AAEF,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAGhB;IACA;IAHlB,YACE,OAAe,EACC,OAAqB,YAAY,CAAC,iBAAiB,EACnD,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAA+C;QACnD,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,SAAS;IAC1D,YAAY,YAAoB,EAAE,aAAqB;QACrD,KAAK,CAAC,+BAA+B,YAAY,EAAE,EAAE,YAAY,CAAC,iBAAiB,EAAE;YACnF,YAAY;YACZ,aAAa,EAAE,aAAa,EAAE,OAAO;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,OAAe,EAAE,MAAe;QAC1C,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,iBAAiB,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,CAAa;IACnB,KAAK,GAA6D,IAAI,GAAG,EAAE,CAAC;IAC5E,eAAe,GAAuC,IAAI,GAAG,EAAE,CAAC;IAExE,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,mBAAmB,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,WAA8B,EAC9B,iBAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACnD,CAAC;QAED,+BAA+B;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QAED,cAAc;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CACV,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,EAC1C,iCAAiC,CAClC,CAAC;YACF,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,EAAE,kCAAkC,CAAC,CAAC;YAC7F,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,kCAAkC;QAClC,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAC5C,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,QAAQ,CACT,CAAC;QAEF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC;QAC9B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC9B,WAA8B,EAC9B,iBAAoC,EACpC,YAAoB,EACpB,QAAgB;QAEhB,IAAI,CAAC;YACH,qBAAqB;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAEjF,eAAe;YACf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE5E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;oBACzC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,0BAA0B;wBAC1C,MAAM,EAAE,2BAA2B;qBACpC;oBACD,IAAI,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,YAAY,CAAC,SAAS,CAAC,CAAC;gBAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,iBAAiB,CACzB,gCAAgC,QAAQ,CAAC,MAAM,EAAE,EACjD,QAAQ,CAAC,MAAM,CAChB,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAClD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CACzC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EACzB,YAAY,EACZ,KAAK,CACN,CAAC;gBAEF,qBAAqB;gBACrB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAE3C,MAAM,CAAC,IAAI,CACT;oBACE,YAAY,EAAE,WAAW,CAAC,YAAY;oBACtC,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,YAAY;iBACb,EACD,sBAAsB,CACvB,CAAC;gBAEF,OAAO,YAAY,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,EACjD,yDAAyD,CAC1D,CAAC;gBAEF,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,UAAU,EAAE,IAAI,IAAI,EAAE;oBACtB,UAAU,EAAE,IAAI,IAAI,EAAE;oBACtB,WAAW,EAAE,WAAW;oBACxB,SAAS,EAAE,KAAK;oBAChB,YAAY;iBACb,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,6BAA6B,CACrC,YAAY,EACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,WAA8B;QACpD,qCAAqC;QACrC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAClC,CAAC;QAED,kDAAkD;QAClD,OAAO,WAAW,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACK,gBAAgB,CACtB,WAA8B,EAC9B,iBAAoC,EACpC,KAAc;QAEd,0CAA0C;QAC1C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;aACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aACnD,MAAM,EAAE,CAAC;QAEZ,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC;aACrC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;aAClE,MAAM,EAAE,CAAC;QAEZ,0BAA0B;QAC1B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAEpF,yCAAyC;QACzC,mFAAmF;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAE1D,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,WAAW,CACjB,cAAsB,EACtB,aAAqB,EACrB,YAAoB;QAEpB,wBAAwB;QACxB,uCAAuC;QACvC,iCAAiC;QACjC,gCAAgC;QAChC,yCAAyC;QACzC,IAAI;QAEJ,2BAA2B;QAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACxE,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7F,MAAM,KAAK,GAAG;YACZ,aAAa;YACb,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC;YACpC,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;YACnC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;SAC/B,CAAC;QAEF,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAc;QACjC,yBAAyB;QACzB,oBAAoB;QACpB,6DAA6D;QAC7D,IAAI;QACJ,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,QAAkB,EAAE,KAAc;QACxD,4BAA4B;QAC5B,6CAA6C;QAC7C,qDAAqD;QACrD,qCAAqC;QACrC,uDAAuD;QACvD,IAAI;QAEJ,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC;QAE5B,oCAAoC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC/C,+BAA+B;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvD,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,uBAAuB;YAC7C,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,KAAa;QACvC,kCAAkC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;SACjE,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,UAAkB;QACxC,6BAA6B;QAC7B,2BAA2B;QAC3B,sDAAsD;QACtD,IAAI;QACJ,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,OAAe;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe;QACjC,uDAAuD;QACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,IAAI,IAAI,EAAE,CAAC;YAC9C,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,GAAW,EAAE,OAAe;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAc,CAAC;QAEnB,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACxB,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,IAAY,EACZ,YAAoB,EACpB,aAAsB;QAEtB,wCAAwC;QACxC,2CAA2C;QAE3C,sDAAsD;QACtD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,CAAC,CAAC;QAClE,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,uCAAuC,CAAC,CAAC;QACvE,CAAC;QAED,mCAAmC;QACnC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa;QACtE,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,CAAC,0CAA0C,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QAErD,IAAI,cAAc,KAAK,oBAAoB,CAAC,UAAU,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAC1D,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,CAChC,EAAE,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,IAAI,iBAAiB,CACzB,kCAAkC,UAAU,IAAI,cAAc,EAAE,EAChE,cAAc,CACf,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,+DAA+D;QAE/D,yBAAyB;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEhD,yBAAyB;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAiB;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,SAAS;YACvD,SAAS,EAAE,KAAK;YAChB,YAAY;SACb,CAAC;QAEF,8BAA8B;QAC9B,IAAI,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,aAAa,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,+DAA+D;YACjE,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,IAAY,EAAE,GAAW,EAAE,WAAmB;QAC5D,KAAK,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,IAAY;QAKpC,sCAAsC;QACtC,yBAAyB;QACzB,mCAAmC;QACnC,mCAAmC;QAEnC,6DAA6D;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAEpB,8BAA8B;YAC9B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC5B,CAAC;YAED,iCAAiC;YACjC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,cAAc,EAAE,WAAW,CAAC,IAAI;oBAChC,gBAAgB,EAAE,WAAW,CAAC,MAAM;iBACrC,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,IAAY,EACZ,MAAc;QAEd,6BAA6B;QAC7B,oCAAoC;QACpC,qDAAqD;QACrD,IAAI;QAEJ,MAAM,MAAM,GAAqC,EAAE,CAAC;QAEpD,yDAAyD;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAE,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3F,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACxD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;gBACvC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC;oBACvE,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,GAAW;QACtC,iDAAiD;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,IAAY;QAKpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,uCAAuC;QACvC,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM;YAErB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/E,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;YACD,MAAM,GAAG,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC;QAC9B,CAAC;QAED,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG;YAC3B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG;YACvC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,IAAY;QACrC,sDAAsD;QACtD,sEAAsE;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,qDAAqD;QACrD,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE7E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5D,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9C,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrC,KAAK,GAAG,KAAK,CAAC;oBACd,MAAM;gBACR,CAAC;YACH,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,oCAAoC;gBACpC,MAAM,WAAW,GAAG,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,4BAA4B;gBAC9E,IAAI,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAE,CAAC;oBAC3C,IAAI,WAAW,GAAG,WAAW,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;wBAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,WAAW,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,WAA8B,EAAE,YAAoB;QACtE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC;IAClF,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,IAAI,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,QAAQ,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,QAAgB,EAAE,QAAsB;QAC5D,6BAA6B;QAC7B,IAAI,SAAe,CAAC;QAEpB,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxB,+BAA+B;YAC/B,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnG,CAAC;aAAM,CAAC;YACN,qBAAqB;YACrB,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAElD,uBAAuB;QACvB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAA2B;QACtC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SACvC,CAAC;IACJ,CAAC;CACF;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,IAAI,gBAAgB,GAAyB,IAAI,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA4B;IAC3D,IAAI,CAAC,gBAAgB,IAAI,MAAM,EAAE,CAAC;QAChC,gBAAgB,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAA8B,EAAE;IAClE,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,gBAAgB,GAAG,IAAI,CAAC;AAC1B,CAAC"}