@vorionsys/security 1.0.0

package/dist/proof/index.js

@@ -0,0 +1,610 @@
+/**
+ * PROOF - Immutable Evidence System
+ *
+ * Creates and maintains cryptographically sealed records of all governance decisions.
+ * Supports multiple signing algorithms:
+ * - Ed25519 (default, classical)
+ * - ECDSA P-256 (fallback)
+ * - Hybrid Ed25519 + Dilithium3 (post-quantum resistant)
+ *
+ * Persists to PostgreSQL for durability.
+ *
+ * CRITICAL: Uses distributed locking (Redis) and database row locking (SELECT FOR UPDATE)
+ * to prevent hash chain corruption in multi-instance deployments.
+ *
+ * @packageDocumentation
+ */
+import { eq, and, gte, lte, asc, desc } from 'drizzle-orm';
+import { createLogger } from '../common/logger.js';
+import { sign, verify } from '../common/crypto.js';
+import { initializeHybridSigning, signHybrid, verifyHybrid, isHybridAlgorithm, } from './hybrid-signing.js';
+import { getDatabase } from '../common/db.js';
+import { getPool } from '../common/db.js';
+import { getLockService } from '../common/lock.js';
+import { proofs, proofChainMeta } from '../db/schema/proofs.js';
+import { canonicalize } from '../common/canonical-json.js';
+const logger = createLogger({ component: 'proof' });
+/**
+ * Generate per-tenant lock key for proof chain operations
+ *
+ * SECURITY FIX: Using per-tenant locks prevents cross-tenant DoS attacks
+ * where one tenant's heavy proof creation could block other tenants.
+ *
+ * @param tenantId - The tenant ID for scoped locking
+ * @returns Tenant-scoped lock key
+ */
+function getProofChainLockKey(tenantId) {
+    return `proof:chain:${tenantId}:create`;
+}
+/**
+ * Legacy lock key for proof chain operations
+ * @deprecated Use getProofChainLockKey(tenantId) instead
+ */
+const PROOF_CHAIN_LOCK_KEY = 'proof:chain:create';
+/**
+ * Default genesis hash for empty chain
+ */
+const GENESIS_HASH = '0'.repeat(64);
+/**
+ * Lock options for proof creation
+ */
+const PROOF_LOCK_OPTIONS = {
+    lockTimeoutMs: 30000, // 30 seconds max lock hold time
+    acquireTimeoutMs: 10000, // 10 seconds to acquire lock
+};
+/**
+ * PROOF service for evidence management with PostgreSQL persistence
+ *
+ * CRITICAL FIX (PA-C1/PA-C2/DS-C1): This service now uses:
+ * 1. Redis distributed locks to serialize proof creation across instances
+ * 2. PostgreSQL row-level locking (SELECT FOR UPDATE) for chain state
+ * 3. All state updates happen inside the transaction
+ *
+ * This prevents hash chain corruption in multi-instance deployments.
+ */
+export class ProofService {
+    db = null;
+    lockService = null;
+    chainId = 'default';
+    initialized = false;
+    signingAlgorithm = 'ed25519';
+    /**
+     * Configure the signing algorithm for proof records.
+     *
+     * - 'ed25519' (default): Classical Ed25519 via WebCrypto
+     * - 'ecdsa-p256': Classical ECDSA P-256 via WebCrypto
+     * - 'hybrid-ed25519-dilithium3': Ed25519 + post-quantum Dilithium3 (ML-DSA-65)
+     */
+    setSigningAlgorithm(algorithm) {
+        this.signingAlgorithm = algorithm;
+        logger.info({ algorithm }, 'Proof signing algorithm configured');
+    }
+    /**
+     * Initialize the service - ensures database and lock service are ready
+     *
+     * NOTE: Chain state (lastHash, chainLength) is NO LONGER cached in memory.
+     * It is always read from the database inside a transaction to prevent
+     * race conditions in multi-instance deployments.
+     */
+    async initialize() {
+        if (this.initialized)
+            return;
+        this.db = getDatabase();
+        this.lockService = getLockService();
+        // Ensure chain metadata exists (using upsert pattern)
+        const meta = await this.db
+            .select()
+            .from(proofChainMeta)
+            .where(eq(proofChainMeta.chainId, this.chainId))
+            .limit(1);
+        if (meta.length === 0) {
+            // Create initial chain metadata
+            await this.db.insert(proofChainMeta).values({
+                chainId: this.chainId,
+                lastHash: GENESIS_HASH,
+                chainLength: 0,
+            });
+            logger.info('New proof chain initialized');
+        }
+        else {
+            logger.info({ chainLength: meta[0].chainLength, lastHash: meta[0].lastHash.slice(0, 16) + '...' }, 'Proof chain metadata verified');
+        }
+        // Initialize hybrid signing if configured
+        if (this.signingAlgorithm === 'hybrid-ed25519-dilithium3') {
+            await initializeHybridSigning();
+            logger.info('Hybrid Ed25519 + Dilithium3 signing initialized for proof chain');
+        }
+        this.initialized = true;
+    }
+    /**
+     * Ensure service is initialized
+     */
+    async ensureInitialized() {
+        if (!this.initialized || !this.db) {
+            await this.initialize();
+        }
+        return this.db;
+    }
+    /**
+     * Create a new proof record with cryptographic signature
+     *
+     * CRITICAL FIX (PA-C1/PA-C2/DS-C1): This method now uses:
+     * 1. Redis distributed lock to serialize across multiple service instances
+     * 2. PostgreSQL SELECT FOR UPDATE to lock the chain metadata row
+     * 3. All state reads and writes happen inside the transaction
+     *
+     * SECURITY FIX: Uses per-tenant lock keys to prevent cross-tenant DoS attacks.
+     * Each tenant has their own lock scope, so heavy proof creation by one tenant
+     * cannot block proof creation for other tenants.
+     *
+     * This ensures hash chain integrity in multi-instance deployments.
+     */
+    async create(request) {
+        await this.ensureInitialized();
+        if (!this.lockService) {
+            throw new Error('Lock service not initialized');
+        }
+        // Validate tenantId is provided
+        if (!request.tenantId) {
+            throw new Error('tenantId is required for proof creation (security: prevents cross-tenant DoS)');
+        }
+        // SECURITY: Use per-tenant lock key to prevent cross-tenant DoS
+        const lockKey = getProofChainLockKey(request.tenantId);
+        logger.debug({ tenantId: request.tenantId, lockKey }, 'Acquiring per-tenant proof chain lock');
+        // Step 1: Acquire distributed lock to serialize proof creation across instances
+        const lockResult = await this.lockService.acquire(lockKey, PROOF_LOCK_OPTIONS);
+        if (!lockResult.acquired || !lockResult.lock) {
+            logger.error({ error: lockResult.error, tenantId: request.tenantId, lockKey }, 'Failed to acquire distributed lock for proof creation');
+            throw new Error(`Failed to acquire proof chain lock: ${lockResult.error}`);
+        }
+        try {
+            // Step 2: Execute proof creation with database row locking
+            return await this.createProofWithLock(request);
+        }
+        finally {
+            // Step 3: Always release the distributed lock
+            await lockResult.lock.release();
+        }
+    }
+    /**
+     * Internal method to create proof with database row locking
+     * Called only after distributed lock is acquired
+     */
+    async createProofWithLock(request) {
+        const pool = getPool();
+        if (!pool) {
+            throw new Error('Database pool not initialized');
+        }
+        const proofId = crypto.randomUUID();
+        const createdAt = new Date();
+        // Use raw SQL for the transaction to support SELECT FOR UPDATE
+        const client = await pool.connect();
+        try {
+            await client.query('BEGIN');
+            // Step 1: Lock and read chain metadata with SELECT FOR UPDATE
+            // This prevents concurrent modifications within the same database
+            const metaResult = await client.query(`SELECT chain_id, last_hash, chain_length
+         FROM proof_chain_meta
+         WHERE chain_id = $1
+         FOR UPDATE`, [this.chainId]);
+            if (metaResult.rows.length === 0) {
+                throw new Error(`Chain metadata not found for chain: ${this.chainId}`);
+            }
+            const chainMeta = metaResult.rows[0];
+            const chainPosition = chainMeta.chain_length;
+            const previousHash = chainMeta.last_hash;
+            // Step 2: Build proof data for hashing using DB state (not local state)
+            const proofData = {
+                id: proofId,
+                chainPosition,
+                intentId: request.intent.id,
+                entityId: request.intent.entityId,
+                decision: request.decision,
+                inputs: request.inputs,
+                outputs: request.outputs,
+                previousHash,
+                createdAt: createdAt.toISOString(),
+            };
+            // Step 3: Calculate hash of the proof content
+            const hash = await this.calculateHash(proofData);
+            // Step 4: Sign the hash with configured algorithm
+            let signatureStr;
+            let publicKeyStr;
+            let algorithmStr;
+            let signedAtStr;
+            if (this.signingAlgorithm === 'hybrid-ed25519-dilithium3') {
+                const hybridResult = await signHybrid(hash);
+                signatureStr = hybridResult.combinedSignature;
+                publicKeyStr = hybridResult.combinedPublicKey;
+                algorithmStr = hybridResult.algorithm;
+                signedAtStr = hybridResult.signedAt;
+            }
+            else {
+                const classicalResult = await sign(hash);
+                signatureStr = classicalResult.signature;
+                publicKeyStr = classicalResult.publicKey;
+                algorithmStr = classicalResult.algorithm;
+                signedAtStr = classicalResult.signedAt;
+            }
+            // Step 5: Insert proof record
+            await client.query(`INSERT INTO proofs (
+          id, chain_position, intent_id, entity_id, decision, inputs, outputs,
+          hash, previous_hash, signature, signature_public_key, signature_algorithm,
+          signed_at, created_at
+        ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14)`, [
+                proofId,
+                chainPosition,
+                request.intent.id,
+                request.intent.entityId,
+                JSON.stringify(request.decision),
+                JSON.stringify(request.inputs),
+                JSON.stringify(request.outputs),
+                hash,
+                previousHash,
+                signatureStr,
+                publicKeyStr,
+                algorithmStr,
+                new Date(signedAtStr),
+                createdAt,
+            ]);
+            // Step 6: Update chain metadata (inside same transaction)
+            await client.query(`UPDATE proof_chain_meta
+         SET last_hash = $1, chain_length = $2, updated_at = $3
+         WHERE chain_id = $4`, [hash, chainPosition + 1, new Date(), this.chainId]);
+            // Step 7: Commit transaction
+            await client.query('COMMIT');
+            const signedProof = {
+                id: proofId,
+                chainPosition,
+                intentId: request.intent.id,
+                entityId: request.intent.entityId,
+                decision: request.decision,
+                inputs: request.inputs,
+                outputs: request.outputs,
+                hash,
+                previousHash,
+                signature: signatureStr,
+                createdAt: createdAt.toISOString(),
+                signatureData: {
+                    publicKey: publicKeyStr,
+                    algorithm: algorithmStr,
+                    signedAt: signedAtStr,
+                },
+            };
+            logger.info({
+                proofId,
+                intentId: request.intent.id,
+                chainPosition,
+                signed: true,
+            }, 'Proof created and signed with distributed lock');
+            return signedProof;
+        }
+        catch (error) {
+            // Rollback on any error
+            await client.query('ROLLBACK');
+            logger.error({ error }, 'Failed to create proof, transaction rolled back');
+            throw error;
+        }
+        finally {
+            // Always release the database connection
+            client.release();
+        }
+    }
+    /**
+     * Get a proof by ID
+     */
+    async get(id) {
+        const db = await this.ensureInitialized();
+        const result = await db
+            .select()
+            .from(proofs)
+            .where(eq(proofs.id, id))
+            .limit(1);
+        if (result.length === 0)
+            return undefined;
+        return this.toSignedProof(result[0]);
+    }
+    /**
+     * Query proofs
+     */
+    async query(query) {
+        const db = await this.ensureInitialized();
+        const conditions = [];
+        if (query.entityId) {
+            conditions.push(eq(proofs.entityId, query.entityId));
+        }
+        if (query.intentId) {
+            conditions.push(eq(proofs.intentId, query.intentId));
+        }
+        if (query.startDate) {
+            conditions.push(gte(proofs.createdAt, new Date(query.startDate)));
+        }
+        if (query.endDate) {
+            conditions.push(lte(proofs.createdAt, new Date(query.endDate)));
+        }
+        const offset = query.offset ?? 0;
+        const limit = query.limit ?? 100;
+        const results = await db
+            .select()
+            .from(proofs)
+            .where(conditions.length > 0 ? and(...conditions) : undefined)
+            .orderBy(asc(proofs.chainPosition))
+            .limit(limit)
+            .offset(offset);
+        return results.map((r) => this.toSignedProof(r));
+    }
+    /**
+     * Verify a proof's integrity (hash, chain linkage, and signature)
+     */
+    async verify(id) {
+        const db = await this.ensureInitialized();
+        const issues = [];
+        const result = await db
+            .select()
+            .from(proofs)
+            .where(eq(proofs.id, id))
+            .limit(1);
+        if (result.length === 0) {
+            return {
+                valid: false,
+                proofId: id,
+                chainPosition: -1,
+                issues: ['Proof not found'],
+                verifiedAt: new Date().toISOString(),
+            };
+        }
+        const proof = result[0];
+        // Verify hash
+        const proofData = {
+            id: proof.id,
+            chainPosition: proof.chainPosition,
+            intentId: proof.intentId,
+            entityId: proof.entityId,
+            decision: proof.decision,
+            inputs: proof.inputs,
+            outputs: proof.outputs,
+            previousHash: proof.previousHash,
+            createdAt: proof.createdAt.toISOString(),
+        };
+        const expectedHash = await this.calculateHash(proofData);
+        if (proof.hash !== expectedHash) {
+            issues.push('Hash mismatch - proof content may have been tampered');
+        }
+        // Verify chain linkage
+        if (proof.chainPosition > 0) {
+            const previousResult = await db
+                .select()
+                .from(proofs)
+                .where(eq(proofs.chainPosition, proof.chainPosition - 1))
+                .limit(1);
+            if (previousResult.length > 0) {
+                const previous = previousResult[0];
+                if (proof.previousHash !== previous.hash) {
+                    issues.push('Chain linkage broken - previous hash does not match');
+                }
+            }
+            else {
+                issues.push('Previous proof in chain not found');
+            }
+        }
+        // Verify cryptographic signature
+        if (proof.signature && proof.signaturePublicKey) {
+            if (isHybridAlgorithm(proof.signatureAlgorithm ?? '')) {
+                // Hybrid Ed25519 + Dilithium3 verification
+                const hybridResult = await verifyHybrid(proof.hash, proof.signature, proof.signaturePublicKey);
+                if (!hybridResult.valid) {
+                    issues.push(`Hybrid signature verification failed: ${hybridResult.error || 'invalid signature'} (classical: ${hybridResult.classicalValid}, pq: ${hybridResult.pqValid})`);
+                }
+            }
+            else {
+                // Classical Ed25519/ECDSA verification
+                const sigResult = await verify(proof.hash, proof.signature, proof.signaturePublicKey);
+                if (!sigResult.valid) {
+                    issues.push(`Signature verification failed: ${sigResult.error || 'invalid signature'}`);
+                }
+            }
+        }
+        else {
+            issues.push('Missing signature or public key');
+        }
+        logger.info({
+            proofId: id,
+            valid: issues.length === 0,
+            issues,
+            signatureVerified: issues.length === 0,
+        }, 'Proof verified');
+        return {
+            valid: issues.length === 0,
+            proofId: id,
+            chainPosition: proof.chainPosition,
+            issues,
+            verifiedAt: new Date().toISOString(),
+        };
+    }
+    /**
+     * Verify the entire chain integrity using streaming pagination
+     *
+     * Instead of loading all proofs into memory at once, this method
+     * processes proofs in batches to handle large chains efficiently.
+     *
+     * @param options - Verification options including batch size and progress callback
+     * @returns Chain verification result
+     */
+    async verifyChain(options = {}) {
+        const db = await this.ensureInitialized();
+        const issues = [];
+        let lastValidPosition = -1;
+        let totalVerified = 0;
+        const batchSize = options.batchSize ?? 100;
+        let offset = 0;
+        let hasMore = true;
+        // Get total count for progress reporting
+        const countResult = await db
+            .select({ count: proofs.chainPosition })
+            .from(proofs)
+            .orderBy(desc(proofs.chainPosition))
+            .limit(1);
+        const totalCount = countResult.length > 0 ? countResult[0].count + 1 : 0;
+        // Stream through proofs in batches
+        while (hasMore) {
+            const batch = await db
+                .select()
+                .from(proofs)
+                .orderBy(asc(proofs.chainPosition))
+                .limit(batchSize)
+                .offset(offset);
+            if (batch.length === 0) {
+                hasMore = false;
+                break;
+            }
+            for (const proof of batch) {
+                const verification = await this.verify(proof.id);
+                if (!verification.valid) {
+                    issues.push(`Position ${proof.chainPosition}: ${verification.issues.join(', ')}`);
+                    hasMore = false;
+                    break;
+                }
+                lastValidPosition = proof.chainPosition;
+                totalVerified++;
+                // Report progress if callback provided
+                if (options.onProgress) {
+                    options.onProgress(totalVerified, totalCount);
+                }
+            }
+            // If we found an issue, stop processing
+            if (issues.length > 0) {
+                break;
+            }
+            offset += batchSize;
+            // Check if we've processed all proofs
+            if (batch.length < batchSize) {
+                hasMore = false;
+            }
+        }
+        // Update chain metadata with verification result
+        await db
+            .update(proofChainMeta)
+            .set({
+            lastVerifiedAt: new Date(),
+            lastVerifiedPosition: lastValidPosition,
+            updatedAt: new Date(),
+        })
+            .where(eq(proofChainMeta.chainId, this.chainId));
+        return {
+            valid: issues.length === 0,
+            lastValidPosition,
+            issues,
+            totalVerified,
+        };
+    }
+    /**
+     * Calculate hash for a proof record using canonical JSON
+     *
+     * IMPORTANT: Uses canonical JSON serialization to ensure deterministic
+     * hash calculation across different environments. Standard JSON.stringify
+     * does NOT guarantee key order, which can cause hash mismatches.
+     */
+    async calculateHash(proof) {
+        // Use canonical JSON for deterministic serialization
+        // Keys are sorted alphabetically to ensure consistent hashing
+        const data = canonicalize({
+            id: proof.id,
+            chainPosition: proof.chainPosition,
+            intentId: proof.intentId,
+            entityId: proof.entityId,
+            decision: proof.decision,
+            inputs: proof.inputs,
+            outputs: proof.outputs,
+            previousHash: proof.previousHash,
+            createdAt: proof.createdAt,
+        });
+        // Use Web Crypto API for SHA-256
+        const encoder = new TextEncoder();
+        const dataBuffer = encoder.encode(data);
+        const hashBuffer = await crypto.subtle.digest('SHA-256', dataBuffer);
+        const hashArray = Array.from(new Uint8Array(hashBuffer));
+        return hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');
+    }
+    /**
+     * Convert database row to SignedProof
+     */
+    toSignedProof(row) {
+        return {
+            id: row.id,
+            chainPosition: row.chainPosition,
+            intentId: row.intentId,
+            entityId: row.entityId,
+            decision: row.decision,
+            inputs: row.inputs,
+            outputs: row.outputs,
+            hash: row.hash,
+            previousHash: row.previousHash,
+            signature: row.signature,
+            createdAt: row.createdAt.toISOString(),
+            signatureData: row.signaturePublicKey
+                ? {
+                    publicKey: row.signaturePublicKey,
+                    algorithm: row.signatureAlgorithm ?? 'unknown',
+                    signedAt: row.signedAt?.toISOString() ?? row.createdAt.toISOString(),
+                }
+                : undefined,
+        };
+    }
+    /**
+     * Get chain statistics
+     *
+     * NOTE: Chain stats are now always read from the database to ensure
+     * accuracy in multi-instance deployments.
+     */
+    async getStats() {
+        const db = await this.ensureInitialized();
+        // Read chain metadata from database
+        const meta = await db
+            .select()
+            .from(proofChainMeta)
+            .where(eq(proofChainMeta.chainId, this.chainId))
+            .limit(1);
+        const chainLength = meta.length > 0 ? meta[0].chainLength : 0;
+        const result = await db
+            .select()
+            .from(proofs)
+            .orderBy(desc(proofs.createdAt))
+            .limit(1);
+        return {
+            totalProofs: chainLength,
+            chainLength: chainLength,
+            lastProofAt: result.length > 0 ? result[0].createdAt.toISOString() : null,
+        };
+    }
+    /**
+     * Get the current chain position (for testing/debugging)
+     * Reads directly from database to ensure accuracy.
+     */
+    async getChainPosition() {
+        const db = await this.ensureInitialized();
+        const meta = await db
+            .select()
+            .from(proofChainMeta)
+            .where(eq(proofChainMeta.chainId, this.chainId))
+            .limit(1);
+        if (meta.length === 0) {
+            return { lastHash: GENESIS_HASH, chainLength: 0 };
+        }
+        return {
+            lastHash: meta[0].lastHash,
+            chainLength: meta[0].chainLength,
+        };
+    }
+}
+/**
+ * Create a new PROOF service instance
+ */
+export function createProofService() {
+    return new ProofService();
+}
+// Re-export Merkle tree functionality
+export * from './merkle.js';
+export { getMerkleService, MerkleService } from './merkle-service.js';
+// Re-export hybrid signing for direct use
+export { initializeHybridSigning, signHybrid, verifyHybrid, isHybridAlgorithm, } from './hybrid-signing.js';
+//# sourceMappingURL=index.js.map

package/dist/proof/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/proof/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAO,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,YAAY,EACZ,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAiB,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAoB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAiB,MAAM,wBAAwB,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AA6EpD;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,eAAe,QAAQ,SAAS,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAElD;;GAEG;AACH,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEpC;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,aAAa,EAAE,KAAK,EAAE,gCAAgC;IACtD,gBAAgB,EAAE,KAAK,EAAE,6BAA6B;CACvD,CAAC;AAOF;;;;;;;;;GASG;AACH,MAAM,OAAO,YAAY;IACf,EAAE,GAAoB,IAAI,CAAC;IAC3B,WAAW,GAAuB,IAAI,CAAC;IACvC,OAAO,GAAW,SAAS,CAAC;IAC5B,WAAW,GAAY,KAAK,CAAC;IAC7B,gBAAgB,GAA0B,SAAS,CAAC;IAE5D;;;;;;OAMG;IACH,mBAAmB,CAAC,SAAgC;QAClD,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,IAAI,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,cAAc,EAAE,CAAC;QAEpC,sDAAsD;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;aAC/C,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,gCAAgC;YAChC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;gBAC1C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,YAAY;gBACtB,WAAW,EAAE,CAAC;aACf,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,EACvF,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,gBAAgB,KAAK,2BAA2B,EAAE,CAAC;YAC1D,MAAM,uBAAuB,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,EAAG,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,CAAC,OAAqB;QAChC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACnG,CAAC;QAED,gEAAgE;QAChE,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEvD,MAAM,CAAC,KAAK,CACV,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EACvC,uCAAuC,CACxC,CAAC;QAEF,gFAAgF;QAChF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC/C,OAAO,EACP,kBAAkB,CACnB,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EAChE,uDAAuD,CACxD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC;YACH,2DAA2D;YAC3D,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,8CAA8C;YAC9C,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,mBAAmB,CAAC,OAAqB;QACrD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5B,8DAA8D;YAC9D,kEAAkE;YAClE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CACnC;;;oBAGY,EACZ,CAAC,IAAI,CAAC,OAAO,CAAC,CACf,CAAC;YAEF,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY,CAAC;YAC7C,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC;YAEzC,wEAAwE;YACxE,MAAM,SAAS,GAAG;gBAChB,EAAE,EAAE,OAAO;gBACX,aAAa;gBACb,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,YAAY;gBACZ,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;aACnC,CAAC;YAEF,8CAA8C;YAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAEjD,kDAAkD;YAClD,IAAI,YAAoB,CAAC;YACzB,IAAI,YAAoB,CAAC;YACzB,IAAI,YAAoB,CAAC;YACzB,IAAI,WAAmB,CAAC;YAExB,IAAI,IAAI,CAAC,gBAAgB,KAAK,2BAA2B,EAAE,CAAC;gBAC1D,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC5C,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC;gBAC9C,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAC;gBAC9C,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC;gBACtC,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC;gBACzC,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC;gBACzC,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC;gBACzC,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC;YACzC,CAAC;YAED,8BAA8B;YAC9B,MAAM,MAAM,CAAC,KAAK,CAChB;;;;+EAIuE,EACvE;gBACE,OAAO;gBACP,aAAa;gBACb,OAAO,CAAC,MAAM,CAAC,EAAE;gBACjB,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACvB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC/B,IAAI;gBACJ,YAAY;gBACZ,YAAY;gBACZ,YAAY;gBACZ,YAAY;gBACZ,IAAI,IAAI,CAAC,WAAW,CAAC;gBACrB,SAAS;aACV,CACF,CAAC;YAEF,0DAA0D;YAC1D,MAAM,MAAM,CAAC,KAAK,CAChB;;6BAEqB,EACrB,CAAC,IAAI,EAAE,aAAa,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CACpD,CAAC;YAEF,6BAA6B;YAC7B,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAE7B,MAAM,WAAW,GAAgB;gBAC/B,EAAE,EAAE,OAAO;gBACX,aAAa;gBACb,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI;gBACJ,YAAY;gBACZ,SAAS,EAAE,YAAY;gBACvB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;gBAClC,aAAa,EAAE;oBACb,SAAS,EAAE,YAAY;oBACvB,SAAS,EAAE,YAAY;oBACvB,QAAQ,EAAE,WAAW;iBACtB;aACF,CAAC;YAEF,MAAM,CAAC,IAAI,CACT;gBACE,OAAO;gBACP,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3B,aAAa;gBACb,MAAM,EAAE,IAAI;aACb,EACD,gDAAgD,CACjD,CAAC;YAEF,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wBAAwB;YACxB,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,iDAAiD,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,yCAAyC;YACzC,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,EAAM;QACd,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,EAAE;aACpB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACxB,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1C,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE1C,MAAM,UAAU,GAAG,EAAE,CAAC;QAEtB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC;QAEjC,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;aAC7D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;aAClC,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,MAAM,CAAC,CAAC;QAElB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,EAAM;QACjB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,MAAM,GAAG,MAAM,EAAE;aACpB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACxB,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,CAAC,CAAC;gBACjB,MAAM,EAAE,CAAC,iBAAiB,CAAC;gBAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAEzB,cAAc;QACd,MAAM,SAAS,GAAG;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;SACzC,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEzD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACtE,CAAC;QAED,uBAAuB;QACvB,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,MAAM,EAAE;iBAC5B,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;iBACxD,KAAK,CAAC,CAAC,CAAC,CAAC;YAEZ,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;gBACpC,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACzC,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAChD,IAAI,iBAAiB,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,EAAE,CAAC;gBACtD,2CAA2C;gBAC3C,MAAM,YAAY,GAAG,MAAM,YAAY,CACrC,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,kBAAkB,CACzB,CAAC;gBACF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CACT,yCAAyC,YAAY,CAAC,KAAK,IAAI,mBAAmB,gBAAgB,YAAY,CAAC,cAAc,SAAS,YAAY,CAAC,OAAO,GAAG,CAC9J,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,MAAM,SAAS,GAAG,MAAM,MAAM,CAC5B,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,kBAAkB,CACzB,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CACT,kCAAkC,SAAS,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,CAAC,IAAI,CACT;YACE,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;SACvC,EACD,gBAAgB,CACjB,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM;YACN,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW,CAAC,UAAoC,EAAE;QACtD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,iBAAiB,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;QAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,IAAI,CAAC;QAEnB,yCAAyC;QACzC,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;aACvC,IAAI,CAAC,MAAM,CAAC;aACZ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;aACnC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1E,mCAAmC;QACnC,OAAO,OAAO,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,EAAE;iBACnB,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC;iBACZ,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;iBAClC,KAAK,CAAC,SAAS,CAAC;iBAChB,MAAM,CAAC,MAAM,CAAC,CAAC;YAElB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM;YACR,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAEjD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,aAAa,KAAK,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAClF,OAAO,GAAG,KAAK,CAAC;oBAChB,MAAM;gBACR,CAAC;gBAED,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC;gBACxC,aAAa,EAAE,CAAC;gBAEhB,uCAAuC;gBACvC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACvB,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YAED,wCAAwC;YACxC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM;YACR,CAAC;YAED,MAAM,IAAI,SAAS,CAAC;YAEpB,sCAAsC;YACtC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC7B,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,EAAE;aACL,MAAM,CAAC,cAAc,CAAC;aACtB,GAAG,CAAC;YACH,cAAc,EAAE,IAAI,IAAI,EAAE;YAC1B,oBAAoB,EAAE,iBAAiB;YACvC,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAEnD,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,iBAAiB;YACjB,MAAM;YACN,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa,CACzB,KAAwC;QAExC,qDAAqD;QACrD,8DAA8D;QAC9D,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,iCAAiC;QACjC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAA+B;QACnD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;YACtC,aAAa,EAAE,GAAG,CAAC,kBAAkB;gBACnC,CAAC,CAAC;oBACE,SAAS,EAAE,GAAG,CAAC,kBAAkB;oBACjC,SAAS,EAAE,GAAG,CAAC,kBAAkB,IAAI,SAAS;oBAC9C,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;iBACrE;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE1C,oCAAoC;QACpC,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;aAC/C,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,EAAE;aACpB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO;YACL,WAAW,EAAE,WAAW;YACxB,WAAW,EAAE,WAAW;YACxB,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SAC3E,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE1C,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;aAC/C,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QACpD,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ;YAC3B,WAAW,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW;SAClC,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,YAAY,EAAE,CAAC;AAC5B,CAAC;AAED,sCAAsC;AACtC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAuB,MAAM,qBAAqB,CAAC;AAE3F,0CAA0C;AAC1C,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,YAAY,EACZ,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC"}