@vorionsys/security 1.0.0

package/dist/security/encryption/service.js

@@ -0,0 +1,623 @@
+/**
+ * Field-Level Encryption Service
+ *
+ * Core encryption service providing transparent field-level encryption
+ * for sensitive data stored in the database.
+ *
+ * Features:
+ * - AES-256-GCM authenticated encryption (default)
+ * - ChaCha20-Poly1305 support
+ * - Unique IV per encryption operation
+ * - AAD (Additional Authenticated Data) for field binding
+ * - Key versioning for rotation support
+ * - Deterministic encryption for searchable fields
+ * - Object-level encryption with policy support
+ * - Audit logging for all operations
+ *
+ * Security guarantees:
+ * - Confidentiality: Data is encrypted with strong algorithms
+ * - Integrity: AEAD provides authentication
+ * - Field binding: AAD prevents field swapping attacks
+ * - Key isolation: Field-specific keys via HKDF
+ *
+ * @packageDocumentation
+ * @module security/encryption/service
+ */
+import * as crypto from 'node:crypto';
+import { randomUUID } from 'node:crypto';
+import { createLogger } from '../../common/logger.js';
+import { getKeyProvider } from './key-provider.js';
+import { DEFAULT_ENCRYPTION_CONFIG, EncryptionAlgorithm as Algorithm, EncryptionOperation, CLASSIFICATION_LEVELS, isEncryptedFieldMarker, EncryptionErrorCode, } from './types.js';
+const logger = createLogger({ component: 'field-encryption-service' });
+// =============================================================================
+// Encryption Error
+// =============================================================================
+/**
+ * Custom error class for encryption operations
+ */
+export class FieldEncryptionError extends Error {
+    code;
+    details;
+    constructor(message, code, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'FieldEncryptionError';
+    }
+}
+// =============================================================================
+// Algorithm Helpers
+// =============================================================================
+/**
+ * Get Node.js cipher algorithm name
+ */
+function getCipherAlgorithm(algorithm) {
+    switch (algorithm) {
+        case Algorithm.AES_256_GCM:
+            return 'aes-256-gcm';
+        case Algorithm.AES_256_CBC:
+            return 'aes-256-cbc';
+        case Algorithm.CHACHA20_POLY1305:
+            return 'chacha20-poly1305';
+        default:
+            throw new FieldEncryptionError(`Unsupported algorithm: ${algorithm}`, EncryptionErrorCode.INVALID_ALGORITHM);
+    }
+}
+/**
+ * Check if algorithm supports AEAD (authenticated encryption)
+ */
+function isAEAD(algorithm) {
+    return algorithm === Algorithm.AES_256_GCM || algorithm === Algorithm.CHACHA20_POLY1305;
+}
+/**
+ * Get IV length for algorithm
+ */
+function getIVLength(algorithm) {
+    switch (algorithm) {
+        case Algorithm.AES_256_GCM:
+            return 12; // GCM recommends 12 bytes
+        case Algorithm.AES_256_CBC:
+            return 16;
+        case Algorithm.CHACHA20_POLY1305:
+            return 12;
+        default:
+            return 16;
+    }
+}
+// =============================================================================
+// Field Encryption Service
+// =============================================================================
+/**
+ * Field-level encryption service
+ *
+ * Provides methods for encrypting and decrypting individual fields
+ * with support for key versioning, AAD binding, and audit logging.
+ *
+ * @example
+ * ```typescript
+ * const service = createFieldEncryptionService();
+ * await service.initialize();
+ *
+ * // Encrypt a sensitive field
+ * const encrypted = await service.encrypt('123-45-6789', {
+ *   fieldName: 'ssn',
+ *   classification: DataClassification.RESTRICTED,
+ * });
+ *
+ * // Decrypt the field
+ * const plaintext = await service.decrypt(encrypted, {
+ *   fieldName: 'ssn',
+ * });
+ * ```
+ */
+export class FieldEncryptionService {
+    config;
+    keyProvider;
+    auditCallbacks = [];
+    initialized = false;
+    constructor(config = {}, keyProvider) {
+        this.config = { ...DEFAULT_ENCRYPTION_CONFIG, ...config };
+        this.keyProvider = keyProvider ?? getKeyProvider();
+    }
+    /**
+     * Initialize the encryption service
+     */
+    async initialize() {
+        if (this.initialized) {
+            logger.warn('FieldEncryptionService already initialized');
+            return;
+        }
+        logger.info('Initializing FieldEncryptionService');
+        // Initialize key provider
+        await this.keyProvider.initialize();
+        this.initialized = true;
+        logger.info('FieldEncryptionService initialized');
+    }
+    /**
+     * Ensure the service is initialized
+     */
+    ensureInitialized() {
+        if (!this.initialized) {
+            throw new FieldEncryptionError('FieldEncryptionService not initialized. Call initialize() first.', EncryptionErrorCode.KEY_PROVIDER_NOT_INITIALIZED);
+        }
+    }
+    /**
+     * Register an audit callback
+     */
+    onAudit(callback) {
+        this.auditCallbacks.push(callback);
+    }
+    /**
+     * Emit audit event
+     */
+    async emitAudit(entry) {
+        if (!this.config.auditLogging)
+            return;
+        for (const callback of this.auditCallbacks) {
+            try {
+                await callback(entry);
+            }
+            catch (error) {
+                logger.error({ error, entryId: entry.id }, 'Audit callback failed');
+            }
+        }
+    }
+    /**
+     * Check if encryption is required for the given classification
+     */
+    requiresEncryption(classification) {
+        if (!classification)
+            return true; // Encrypt by default
+        if (!this.config.enabled)
+            return false;
+        const classificationLevel = CLASSIFICATION_LEVELS[classification];
+        const minimumLevel = CLASSIFICATION_LEVELS[this.config.minimumEncryptionLevel];
+        return classificationLevel >= minimumLevel;
+    }
+    /**
+     * Build Additional Authenticated Data (AAD)
+     */
+    buildAAD(fieldName, additionalData) {
+        const parts = [];
+        if (this.config.includeFieldNameInAAD && fieldName) {
+            parts.push(`field:${fieldName}`);
+        }
+        if (additionalData) {
+            parts.push(`extra:${additionalData}`);
+        }
+        return Buffer.from(parts.join('|'), 'utf-8');
+    }
+    /**
+     * Encrypt a plaintext value
+     *
+     * @param plaintext - The value to encrypt
+     * @param options - Encryption options
+     * @returns Encrypted field marker ready for storage
+     */
+    async encrypt(plaintext, options = {}) {
+        this.ensureInitialized();
+        const startTime = performance.now();
+        const { fieldName, classification, algorithm = this.config.defaultAlgorithm, keyVersion, deterministic = false, additionalData, tenantId, } = options;
+        // Check if encryption is required
+        if (!this.requiresEncryption(classification)) {
+            // Return unencrypted marker for tracking
+            const encryptedField = {
+                ciphertext: Buffer.from(plaintext, 'utf-8').toString('base64'),
+                iv: '',
+                authTag: '',
+                algorithm,
+                keyVersion: 0,
+                fieldName,
+                encryptedAt: this.config.includeTimestamp ? new Date().toISOString() : undefined,
+                deterministic: false,
+            };
+            return {
+                __encrypted: true,
+                __version: 2,
+                field: encryptedField,
+            };
+        }
+        try {
+            // Get key version
+            const version = keyVersion ?? await this.keyProvider.getCurrentVersion();
+            // Derive field-specific key
+            const key = deterministic
+                ? await this.keyProvider.deriveDeterministicKey(version, fieldName ?? 'default', tenantId)
+                : await this.keyProvider.deriveFieldKey(version, fieldName ?? 'default', tenantId);
+            // Generate IV
+            const ivLength = getIVLength(algorithm);
+            let iv;
+            if (deterministic) {
+                // For deterministic encryption, derive IV from plaintext
+                // This allows same plaintext to produce same ciphertext for searching
+                const ivHash = crypto.createHmac('sha256', key)
+                    .update(plaintext)
+                    .digest();
+                iv = ivHash.subarray(0, ivLength);
+            }
+            else {
+                // Random IV for non-deterministic encryption
+                iv = crypto.randomBytes(ivLength);
+            }
+            // Build AAD
+            const aad = this.buildAAD(fieldName, additionalData);
+            // Get cipher algorithm
+            const cipherAlgorithm = getCipherAlgorithm(algorithm);
+            // Encrypt
+            let ciphertext;
+            let authTag;
+            if (isAEAD(algorithm)) {
+                // Use explicit type for GCM cipher
+                const cipherOptions = {
+                    authTagLength: this.config.authTagLength,
+                };
+                const cipher = crypto.createCipheriv(cipherAlgorithm, key, iv, cipherOptions);
+                cipher.setAAD(aad);
+                ciphertext = Buffer.concat([
+                    cipher.update(plaintext, 'utf-8'),
+                    cipher.final(),
+                ]);
+                authTag = cipher.getAuthTag();
+            }
+            else {
+                // CBC mode - compute HMAC separately
+                const cipher = crypto.createCipheriv(cipherAlgorithm, key, iv);
+                ciphertext = Buffer.concat([
+                    cipher.update(plaintext, 'utf-8'),
+                    cipher.final(),
+                ]);
+                // HMAC for authentication
+                const hmac = crypto.createHmac('sha256', key);
+                hmac.update(iv);
+                hmac.update(ciphertext);
+                hmac.update(aad);
+                authTag = hmac.digest();
+            }
+            // Clear sensitive key material
+            key.fill(0);
+            const encryptedField = {
+                ciphertext: ciphertext.toString('base64'),
+                iv: iv.toString('base64'),
+                authTag: authTag.toString('base64'),
+                algorithm,
+                keyVersion: version,
+                fieldName,
+                encryptedAt: this.config.includeTimestamp ? new Date().toISOString() : undefined,
+                deterministic,
+            };
+            const durationMs = performance.now() - startTime;
+            // Emit audit event
+            await this.emitAudit({
+                id: randomUUID(),
+                timestamp: new Date(),
+                operation: EncryptionOperation.ENCRYPT,
+                fieldName,
+                keyVersion: version,
+                algorithm,
+                success: true,
+                durationMs,
+                tenantId,
+            });
+            return {
+                __encrypted: true,
+                __version: 2,
+                field: encryptedField,
+            };
+        }
+        catch (error) {
+            const durationMs = performance.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            // Emit failed audit event
+            await this.emitAudit({
+                id: randomUUID(),
+                timestamp: new Date(),
+                operation: EncryptionOperation.ENCRYPT,
+                fieldName,
+                keyVersion: keyVersion ?? 0,
+                algorithm,
+                success: false,
+                error: errorMessage,
+                durationMs,
+                tenantId,
+            });
+            throw new FieldEncryptionError(`Encryption failed: ${errorMessage}`, EncryptionErrorCode.ENCRYPTION_FAILED, { fieldName, algorithm });
+        }
+    }
+    /**
+     * Decrypt an encrypted field
+     *
+     * @param encryptedMarker - The encrypted field marker
+     * @param options - Decryption options
+     * @returns Decrypted plaintext
+     */
+    async decrypt(encryptedMarker, options = {}) {
+        this.ensureInitialized();
+        const startTime = performance.now();
+        if (!isEncryptedFieldMarker(encryptedMarker)) {
+            throw new FieldEncryptionError('Invalid encrypted field format', EncryptionErrorCode.INVALID_FORMAT);
+        }
+        const { field } = encryptedMarker;
+        const { fieldName, additionalData, tenantId } = options;
+        // Check for unencrypted marker (keyVersion 0)
+        if (field.keyVersion === 0) {
+            return Buffer.from(field.ciphertext, 'base64').toString('utf-8');
+        }
+        // Verify field name if AAD binding is enabled
+        if (this.config.includeFieldNameInAAD && fieldName && field.fieldName) {
+            if (fieldName !== field.fieldName) {
+                throw new FieldEncryptionError(`Field name mismatch: expected ${fieldName}, got ${field.fieldName}`, EncryptionErrorCode.FIELD_NAME_MISMATCH, { expected: fieldName, actual: field.fieldName });
+            }
+        }
+        try {
+            // Derive field-specific key
+            const effectiveFieldName = fieldName ?? field.fieldName ?? 'default';
+            const key = field.deterministic
+                ? await this.keyProvider.deriveDeterministicKey(field.keyVersion, effectiveFieldName, tenantId)
+                : await this.keyProvider.deriveFieldKey(field.keyVersion, effectiveFieldName, tenantId);
+            // Decode encrypted components
+            const ciphertext = Buffer.from(field.ciphertext, 'base64');
+            const iv = Buffer.from(field.iv, 'base64');
+            const authTag = Buffer.from(field.authTag, 'base64');
+            // Build AAD
+            const aad = this.buildAAD(effectiveFieldName, additionalData);
+            // Get cipher algorithm
+            const cipherAlgorithm = getCipherAlgorithm(field.algorithm);
+            // Decrypt
+            let plaintext;
+            if (isAEAD(field.algorithm)) {
+                // Use explicit type for GCM decipher
+                const decipherOptions = {
+                    authTagLength: this.config.authTagLength,
+                };
+                const decipher = crypto.createDecipheriv(cipherAlgorithm, key, iv, decipherOptions);
+                decipher.setAAD(aad);
+                decipher.setAuthTag(authTag);
+                plaintext = decipher.update(ciphertext).toString('utf-8') + decipher.final('utf-8');
+            }
+            else {
+                // CBC mode - verify HMAC first
+                const hmac = crypto.createHmac('sha256', key);
+                hmac.update(iv);
+                hmac.update(ciphertext);
+                hmac.update(aad);
+                const expectedTag = hmac.digest();
+                if (!crypto.timingSafeEqual(authTag, expectedTag)) {
+                    throw new FieldEncryptionError('Authentication tag verification failed', EncryptionErrorCode.AUTH_TAG_MISMATCH);
+                }
+                const decipher = crypto.createDecipheriv(cipherAlgorithm, key, iv);
+                plaintext = decipher.update(ciphertext).toString('utf-8') + decipher.final('utf-8');
+            }
+            // Clear sensitive key material
+            key.fill(0);
+            const durationMs = performance.now() - startTime;
+            // Emit audit event
+            await this.emitAudit({
+                id: randomUUID(),
+                timestamp: new Date(),
+                operation: EncryptionOperation.DECRYPT,
+                fieldName: effectiveFieldName,
+                keyVersion: field.keyVersion,
+                algorithm: field.algorithm,
+                success: true,
+                durationMs,
+                tenantId,
+            });
+            return plaintext;
+        }
+        catch (error) {
+            const durationMs = performance.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            // Emit failed audit event
+            await this.emitAudit({
+                id: randomUUID(),
+                timestamp: new Date(),
+                operation: EncryptionOperation.DECRYPT,
+                fieldName: fieldName ?? field.fieldName,
+                keyVersion: field.keyVersion,
+                algorithm: field.algorithm,
+                success: false,
+                error: errorMessage,
+                durationMs,
+                tenantId,
+            });
+            if (error instanceof FieldEncryptionError) {
+                throw error;
+            }
+            throw new FieldEncryptionError(`Decryption failed: ${errorMessage}`, EncryptionErrorCode.DECRYPTION_FAILED, { fieldName: field.fieldName, algorithm: field.algorithm });
+        }
+    }
+    /**
+     * Encrypt multiple fields in an object according to a policy
+     *
+     * @param obj - The object containing fields to encrypt
+     * @param policy - The encryption policy defining which fields to encrypt
+     * @param tenantId - Optional tenant ID for multi-tenant isolation
+     * @returns Object with encrypted fields
+     */
+    async encryptObject(obj, policy, tenantId) {
+        this.ensureInitialized();
+        const result = { ...obj };
+        for (const fieldPolicy of policy.fields) {
+            if (!fieldPolicy.encrypted)
+                continue;
+            const value = this.getNestedValue(obj, fieldPolicy.fieldName);
+            if (value === undefined || value === null)
+                continue;
+            const encrypted = await this.encrypt(String(value), {
+                fieldName: fieldPolicy.fieldName,
+                classification: fieldPolicy.classification,
+                algorithm: fieldPolicy.algorithm,
+                deterministic: fieldPolicy.deterministic,
+                tenantId,
+            });
+            this.setNestedValue(result, fieldPolicy.fieldName, encrypted);
+        }
+        return result;
+    }
+    /**
+     * Decrypt multiple fields in an object according to a policy
+     *
+     * @param obj - The object containing encrypted fields
+     * @param policy - The encryption policy defining which fields to decrypt
+     * @param tenantId - Optional tenant ID for multi-tenant isolation
+     * @returns Object with decrypted fields
+     */
+    async decryptObject(obj, policy, tenantId) {
+        this.ensureInitialized();
+        const result = { ...obj };
+        for (const fieldPolicy of policy.fields) {
+            if (!fieldPolicy.encrypted)
+                continue;
+            const value = this.getNestedValue(obj, fieldPolicy.fieldName);
+            if (!isEncryptedFieldMarker(value))
+                continue;
+            const decrypted = await this.decrypt(value, {
+                fieldName: fieldPolicy.fieldName,
+                tenantId,
+            });
+            this.setNestedValue(result, fieldPolicy.fieldName, decrypted);
+        }
+        return result;
+    }
+    /**
+     * Re-encrypt a field with a new key version
+     *
+     * @param encryptedMarker - The currently encrypted field
+     * @param options - Re-encryption options including new key version
+     * @returns Newly encrypted field marker
+     */
+    async reencrypt(encryptedMarker, options) {
+        this.ensureInitialized();
+        const startTime = performance.now();
+        try {
+            // First decrypt with current key
+            const plaintext = await this.decrypt(encryptedMarker, {
+                fieldName: options.fieldName ?? encryptedMarker.field.fieldName,
+                tenantId: options.tenantId,
+            });
+            // Re-encrypt with new key version
+            const result = await this.encrypt(plaintext, {
+                fieldName: options.fieldName ?? encryptedMarker.field.fieldName,
+                algorithm: options.newAlgorithm ?? encryptedMarker.field.algorithm,
+                keyVersion: options.newKeyVersion,
+                deterministic: encryptedMarker.field.deterministic,
+                tenantId: options.tenantId,
+            });
+            const durationMs = performance.now() - startTime;
+            // Emit audit event
+            await this.emitAudit({
+                id: randomUUID(),
+                timestamp: new Date(),
+                operation: EncryptionOperation.REENCRYPT,
+                fieldName: options.fieldName ?? encryptedMarker.field.fieldName,
+                keyVersion: options.newKeyVersion,
+                algorithm: options.newAlgorithm ?? encryptedMarker.field.algorithm,
+                success: true,
+                durationMs,
+                tenantId: options.tenantId,
+            });
+            return result;
+        }
+        catch (error) {
+            const durationMs = performance.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            await this.emitAudit({
+                id: randomUUID(),
+                timestamp: new Date(),
+                operation: EncryptionOperation.REENCRYPT,
+                fieldName: options.fieldName,
+                keyVersion: options.newKeyVersion,
+                algorithm: options.newAlgorithm ?? encryptedMarker.field.algorithm,
+                success: false,
+                error: errorMessage,
+                durationMs,
+                tenantId: options.tenantId,
+            });
+            throw new FieldEncryptionError(`Re-encryption failed: ${errorMessage}`, EncryptionErrorCode.REENCRYPT_FAILED, { fieldName: options.fieldName });
+        }
+    }
+    /**
+     * Get the current key version
+     */
+    async getCurrentKeyVersion() {
+        this.ensureInitialized();
+        return this.keyProvider.getCurrentVersion();
+    }
+    /**
+     * Get nested value from object using dot notation
+     */
+    getNestedValue(obj, path) {
+        const parts = path.split('.');
+        let current = obj;
+        for (const part of parts) {
+            if (current === null || current === undefined)
+                return undefined;
+            if (typeof current !== 'object')
+                return undefined;
+            current = current[part];
+        }
+        return current;
+    }
+    /**
+     * Set nested value in object using dot notation
+     */
+    setNestedValue(obj, path, value) {
+        const parts = path.split('.');
+        let current = obj;
+        for (let i = 0; i < parts.length - 1; i++) {
+            const part = parts[i];
+            if (!(part in current) || typeof current[part] !== 'object') {
+                current[part] = {};
+            }
+            current = current[part];
+        }
+        current[parts[parts.length - 1]] = value;
+    }
+    /**
+     * Shutdown the service
+     */
+    async shutdown() {
+        logger.info('Shutting down FieldEncryptionService');
+        await this.keyProvider.shutdown();
+        this.initialized = false;
+        logger.info('FieldEncryptionService shutdown complete');
+    }
+}
+// =============================================================================
+// Factory Functions
+// =============================================================================
+/**
+ * Create a new FieldEncryptionService instance
+ */
+export function createFieldEncryptionService(config, keyProvider) {
+    return new FieldEncryptionService(config, keyProvider);
+}
+// =============================================================================
+// Singleton Management
+// =============================================================================
+let defaultService = null;
+/**
+ * Get the default field encryption service instance
+ */
+export function getFieldEncryptionService() {
+    if (!defaultService) {
+        defaultService = createFieldEncryptionService();
+    }
+    return defaultService;
+}
+/**
+ * Set a custom field encryption service as the default
+ */
+export function setFieldEncryptionService(service) {
+    defaultService = service;
+}
+/**
+ * Reset the default field encryption service (for testing)
+ */
+export async function resetFieldEncryptionService() {
+    if (defaultService) {
+        await defaultService.shutdown();
+        defaultService = null;
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/security/encryption/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/security/encryption/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAenD,OAAO,EACL,yBAAyB,EACzB,mBAAmB,IAAI,SAAS,EAEhC,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAAC,CAAC;AAEvE,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAG3B;IACA;IAHlB,YACE,OAAe,EACC,IAAY,EACZ,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,kBAAkB,CAAC,SAA8B;IACxD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS,CAAC,WAAW;YACxB,OAAO,aAAa,CAAC;QACvB,KAAK,SAAS,CAAC,WAAW;YACxB,OAAO,aAAa,CAAC;QACvB,KAAK,SAAS,CAAC,iBAAiB;YAC9B,OAAO,mBAAmB,CAAC;QAC7B;YACE,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,SAAS,EAAE,EACrC,mBAAmB,CAAC,iBAAiB,CACtC,CAAC;IACN,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,MAAM,CAAC,SAA8B;IAC5C,OAAO,SAAS,KAAK,SAAS,CAAC,WAAW,IAAI,SAAS,KAAK,SAAS,CAAC,iBAAiB,CAAC;AAC1F,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,SAA8B;IACjD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS,CAAC,WAAW;YACxB,OAAO,EAAE,CAAC,CAAC,0BAA0B;QACvC,KAAK,SAAS,CAAC,WAAW;YACxB,OAAO,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC,iBAAiB;YAC9B,OAAO,EAAE,CAAC;QACZ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAmB;IACzB,WAAW,CAAc;IACzB,cAAc,GAAoB,EAAE,CAAC;IAC9C,WAAW,GAAG,KAAK,CAAC;IAE5B,YACE,SAAoC,EAAE,EACtC,WAAyB;QAEzB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,yBAAyB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1D,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAEnD,0BAA0B;QAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAEpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,oBAAoB,CAC5B,kEAAkE,EAClE,mBAAmB,CAAC,4BAA4B,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAuB;QAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,KAA2B;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,OAAO;QAEtC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,cAAmC;QAC5D,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;QACvD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAE/E,OAAO,mBAAmB,IAAI,YAAY,CAAC;IAC7C,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,SAAkB,EAAE,cAAuB;QAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,SAAS,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,UAA0B,EAAE;QAE5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,MAAM,EACJ,SAAS,EACT,cAAc,EACd,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EACxC,UAAU,EACV,aAAa,GAAG,KAAK,EACrB,cAAc,EACd,QAAQ,GACT,GAAG,OAAO,CAAC;QAEZ,kCAAkC;QAClC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,yCAAyC;YACzC,MAAM,cAAc,GAAmB;gBACrC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC9D,EAAE,EAAE,EAAE;gBACN,OAAO,EAAE,EAAE;gBACX,SAAS;gBACT,UAAU,EAAE,CAAC;gBACb,SAAS;gBACT,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;gBAChF,aAAa,EAAE,KAAK;aACrB,CAAC;YAEF,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,CAAC;gBACZ,KAAK,EAAE,cAAc;aACtB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB;YAClB,MAAM,OAAO,GAAG,UAAU,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;YAEzE,4BAA4B;YAC5B,MAAM,GAAG,GAAG,aAAa;gBACvB,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,OAAO,EAAE,SAAS,IAAI,SAAS,EAAE,QAAQ,CAAC;gBAC1F,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,IAAI,SAAS,EAAE,QAAQ,CAAC,CAAC;YAErF,cAAc;YACd,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,EAAU,CAAC;YAEf,IAAI,aAAa,EAAE,CAAC;gBAClB,yDAAyD;gBACzD,sEAAsE;gBACtE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;qBAC5C,MAAM,CAAC,SAAS,CAAC;qBACjB,MAAM,EAAE,CAAC;gBACZ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,6CAA6C;gBAC7C,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;YAED,YAAY;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAErD,uBAAuB;YACvB,MAAM,eAAe,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAEtD,UAAU;YACV,IAAI,UAAkB,CAAC;YACvB,IAAI,OAAe,CAAC;YAEpB,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtB,mCAAmC;gBACnC,MAAM,aAAa,GAA4B;oBAC7C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;iBACzC,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAClC,eAAwC,EACxC,GAAG,EACH,EAAE,EACF,aAAa,CACd,CAAC;gBAEF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAEnB,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;oBACzB,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;oBACjC,MAAM,CAAC,KAAK,EAAE;iBACf,CAAC,CAAC;gBAEH,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,qCAAqC;gBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,eAAe,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/D,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;oBACzB,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;oBACjC,MAAM,CAAC,KAAK,EAAE;iBACf,CAAC,CAAC;gBAEH,0BAA0B;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,CAAC;YAED,+BAA+B;YAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAEZ,MAAM,cAAc,GAAmB;gBACrC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACzC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACzB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACnC,SAAS;gBACT,UAAU,EAAE,OAAO;gBACnB,SAAS;gBACT,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;gBAChF,aAAa;aACd,CAAC;YAEF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEjD,mBAAmB;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,mBAAmB,CAAC,OAAO;gBACtC,SAAS;gBACT,UAAU,EAAE,OAAO;gBACnB,SAAS;gBACT,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,CAAC;gBACZ,KAAK,EAAE,cAAc;aACtB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAE9E,0BAA0B;YAC1B,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,mBAAmB,CAAC,OAAO;gBACtC,SAAS;gBACT,UAAU,EAAE,UAAU,IAAI,CAAC;gBAC3B,SAAS;gBACT,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,YAAY;gBACnB,UAAU;gBACV,QAAQ;aACT,CAAC,CAAC;YAEH,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,YAAY,EAAE,EACpC,mBAAmB,CAAC,iBAAiB,EACrC,EAAE,SAAS,EAAE,SAAS,EAAE,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CACX,eAAqC,EACrC,UAA0B,EAAE;QAE5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,oBAAoB,CAC5B,gCAAgC,EAChC,mBAAmB,CAAC,cAAc,CACnC,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;QAClC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAExD,8CAA8C;QAC9C,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC;QAED,8CAA8C;QAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACtE,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,oBAAoB,CAC5B,iCAAiC,SAAS,SAAS,KAAK,CAAC,SAAS,EAAE,EACpE,mBAAmB,CAAC,mBAAmB,EACvC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,CACjD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,4BAA4B;YAC5B,MAAM,kBAAkB,GAAG,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;YACrE,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa;gBAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,EAAE,QAAQ,CAAC;gBAC/F,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAE1F,8BAA8B;YAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAErD,YAAY;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;YAE9D,uBAAuB;YACvB,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAE5D,UAAU;YACV,IAAI,SAAiB,CAAC;YAEtB,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5B,qCAAqC;gBACrC,MAAM,eAAe,GAA4B;oBAC/C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;iBACzC,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CACtC,eAAwC,EACxC,GAAG,EACH,EAAE,EACF,eAAe,CAChB,CAAC;gBAEF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAE7B,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,+BAA+B;gBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAElC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;oBAClD,MAAM,IAAI,oBAAoB,CAC5B,wCAAwC,EACxC,mBAAmB,CAAC,iBAAiB,CACtC,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnE,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtF,CAAC;YAED,+BAA+B;YAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAEZ,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEjD,mBAAmB;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,mBAAmB,CAAC,OAAO;gBACtC,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAE9E,0BAA0B;YAC1B,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,mBAAmB,CAAC,OAAO;gBACtC,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,SAAS;gBACvC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,YAAY;gBACnB,UAAU;gBACV,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,YAAY,EAAE,EACpC,mBAAmB,CAAC,iBAAiB,EACrC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CACjB,GAAM,EACN,MAA6B,EAC7B,QAAiB;QAEjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAE1B,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,WAAW,CAAC,SAAS;gBAAE,SAAS;YAErC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAEpD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAClD,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,cAAc,EAAE,WAAW,CAAC,cAAc;gBAC1C,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,aAAa,EAAE,WAAW,CAAC,aAAa;gBACxC,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CACjB,GAAM,EACN,MAA6B,EAC7B,QAAiB;QAEjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAE1B,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,WAAW,CAAC,SAAS;gBAAE,SAAS;YAErC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;gBAAE,SAAS;YAE7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;gBAC1C,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CACb,eAAqC,EACrC,OAAyB;QAEzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;gBACpD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS;gBAC/D,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,kCAAkC;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBAC3C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS;gBAC/D,SAAS,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS;gBAClE,UAAU,EAAE,OAAO,CAAC,aAAa;gBACjC,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,aAAa;gBAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEjD,mBAAmB;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,mBAAmB,CAAC,SAAS;gBACxC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS;gBAC/D,UAAU,EAAE,OAAO,CAAC,aAAa;gBACjC,SAAS,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS;gBAClE,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAE9E,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,mBAAmB,CAAC,SAAS;gBACxC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,aAAa;gBACjC,SAAS,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS;gBAClE,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,YAAY;gBACnB,UAAU;gBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,MAAM,IAAI,oBAAoB,CAC5B,yBAAyB,YAAY,EAAE,EACvC,mBAAmB,CAAC,gBAAgB,EACpC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAA4B,EAAE,IAAY;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAY,GAAG,CAAC;QAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChE,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAClD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAA4B,EAAE,IAAY,EAAE,KAAc;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,GAA4B,GAAG,CAAC;QAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,IAAI,CAA4B,CAAC;QACrD,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAkC,EAClC,WAAyB;IAEzB,OAAO,IAAI,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF,IAAI,cAAc,GAAkC,IAAI,CAAC;AAEzD;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,4BAA4B,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA+B;IACvE,cAAc,GAAG,OAAO,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,cAAc,CAAC,QAAQ,EAAE,CAAC;QAChC,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC"}