@vorionsys/security 1.0.0

package/dist/security/key-rotation.js

@@ -0,0 +1,530 @@
+/**
+ * @fileoverview Software-based key rotation system for the Vorion platform.
+ *
+ * This module provides comprehensive key lifecycle management including:
+ * - Key generation for signing purposes
+ * - Automatic and manual key rotation with configurable intervals
+ * - Key versioning and history tracking
+ * - Redis-backed key metadata storage
+ * - Graceful key retirement with overlap periods
+ * - Emergency key compromise handling
+ *
+ * The implementation uses the existing crypto module for key generation
+ * and Redis for metadata storage. Key material is stored encrypted
+ * using the platform's encryption utilities.
+ *
+ * @module security/key-rotation
+ */
+import * as crypto from 'node:crypto';
+import { createLogger } from '../common/logger.js';
+import { generateKeyPair, exportKeyPair, } from '../common/crypto.js';
+import { encrypt } from '../common/encryption.js';
+import { getRedis } from '../common/redis.js';
+const logger = createLogger({ component: 'key-rotation' });
+// ============================================================================
+// Constants
+// ============================================================================
+/** Redis key prefix for key storage */
+const KEY_PREFIX = 'vorion:keys:';
+/** Redis key prefix for key type indexes */
+const INDEX_PREFIX = 'vorion:keys:index:';
+/** Default rotation configuration */
+const DEFAULT_CONFIG = {
+    signingKeyRotationDays: 90,
+    encryptionKeyRotationDays: 365,
+    jwtKeyRotationDays: 30,
+    keyOverlapDays: 7,
+    autoRotate: false,
+    notifyBeforeDays: 14,
+};
+// ============================================================================
+// Helper Functions
+// ============================================================================
+/**
+ * Generates a cryptographic fingerprint (SHA-256 hash) of a public key.
+ */
+function generateFingerprint(publicKey) {
+    return crypto.createHash('sha256').update(publicKey).digest('hex');
+}
+/**
+ * Calculates the number of days between two dates.
+ */
+function daysBetween(date1, date2) {
+    const msPerDay = 24 * 60 * 60 * 1000;
+    return Math.floor((date2.getTime() - date1.getTime()) / msPerDay);
+}
+/**
+ * Adds days to a date.
+ */
+function addDays(date, days) {
+    const result = new Date(date);
+    result.setDate(result.getDate() + days);
+    return result;
+}
+/**
+ * Serialize a stored key for Redis storage.
+ */
+function serializeStoredKey(key) {
+    return JSON.stringify({
+        metadata: {
+            ...key.metadata,
+            createdAt: key.metadata.createdAt.toISOString(),
+            activatedAt: key.metadata.activatedAt?.toISOString(),
+            expiresAt: key.metadata.expiresAt?.toISOString(),
+            rotatedAt: key.metadata.rotatedAt?.toISOString(),
+            retiredAt: key.metadata.retiredAt?.toISOString(),
+        },
+        encryptedPrivateKey: key.encryptedPrivateKey,
+        publicKey: key.publicKey,
+    });
+}
+/**
+ * Deserialize a stored key from Redis storage.
+ */
+function deserializeStoredKey(data) {
+    const parsed = JSON.parse(data);
+    return {
+        metadata: {
+            ...parsed.metadata,
+            createdAt: new Date(parsed.metadata.createdAt),
+            activatedAt: parsed.metadata.activatedAt ? new Date(parsed.metadata.activatedAt) : undefined,
+            expiresAt: parsed.metadata.expiresAt ? new Date(parsed.metadata.expiresAt) : undefined,
+            rotatedAt: parsed.metadata.rotatedAt ? new Date(parsed.metadata.rotatedAt) : undefined,
+            retiredAt: parsed.metadata.retiredAt ? new Date(parsed.metadata.retiredAt) : undefined,
+        },
+        encryptedPrivateKey: parsed.encryptedPrivateKey,
+        publicKey: parsed.publicKey,
+    };
+}
+// ============================================================================
+// KeyRotationManager Class
+// ============================================================================
+/**
+ * Manages the complete lifecycle of cryptographic keys for the Vorion platform.
+ *
+ * This class provides comprehensive key management capabilities including:
+ * - Generation of signing keys (Ed25519/ECDSA)
+ * - Automatic and manual key rotation with configurable intervals
+ * - Key versioning to support signature verification during rotation
+ * - Redis-backed metadata storage with encrypted key material
+ * - Emergency key compromise procedures
+ *
+ * @example
+ * ```typescript
+ * const manager = getKeyRotationManager();
+ * await manager.initialize();
+ *
+ * // Generate initial keys
+ * await manager.generateKey('signing');
+ *
+ * // Get active key for signing
+ * const activeKey = await manager.getActiveKey('signing');
+ *
+ * // Check rotation status
+ * const statuses = await manager.getRotationStatus();
+ * ```
+ */
+export class KeyRotationManager {
+    config = { ...DEFAULT_CONFIG };
+    initialized = false;
+    rotationTimers = new Map();
+    redis = null;
+    /**
+     * Initializes the key rotation manager.
+     */
+    async initialize() {
+        if (this.initialized) {
+            logger.warn('KeyRotationManager already initialized');
+            return;
+        }
+        logger.info('Initializing KeyRotationManager');
+        this.redis = getRedis();
+        this.initialized = true;
+        logger.info('KeyRotationManager initialized successfully');
+    }
+    /**
+     * Validates that the manager has been initialized.
+     */
+    ensureInitialized() {
+        if (!this.initialized || !this.redis) {
+            throw new Error('KeyRotationManager not initialized. Call initialize() first.');
+        }
+    }
+    /**
+     * Gets the Redis client.
+     */
+    getRedis() {
+        this.ensureInitialized();
+        return this.redis;
+    }
+    /**
+     * Gets the next version number for a key type.
+     */
+    async getNextVersion(type) {
+        const redis = this.getRedis();
+        const indexKey = `${INDEX_PREFIX}${type}`;
+        const keys = await redis.smembers(indexKey);
+        if (keys.length === 0) {
+            return 1;
+        }
+        let maxVersion = 0;
+        for (const keyId of keys) {
+            const data = await redis.get(`${KEY_PREFIX}${keyId}`);
+            if (data) {
+                const key = deserializeStoredKey(data);
+                if (key.metadata.version > maxVersion) {
+                    maxVersion = key.metadata.version;
+                }
+            }
+        }
+        return maxVersion + 1;
+    }
+    /**
+     * Gets the rotation days for a specific key type.
+     */
+    getRotationDays(type) {
+        switch (type) {
+            case 'signing':
+                return this.config.signingKeyRotationDays;
+            case 'encryption':
+                return this.config.encryptionKeyRotationDays;
+            case 'jwt':
+                return this.config.jwtKeyRotationDays;
+        }
+    }
+    /**
+     * Generates a new cryptographic key of the specified type.
+     */
+    async generateKey(type) {
+        this.ensureInitialized();
+        logger.info({ type }, 'Generating new key');
+        const redis = this.getRedis();
+        const version = await this.getNextVersion(type);
+        const id = crypto.randomUUID();
+        const now = new Date();
+        // Generate key pair using existing crypto module
+        const keyPair = await generateKeyPair();
+        const exportedKeyPair = await exportKeyPair(keyPair);
+        // Encrypt the private key using existing encryption
+        const encryptedPrivateKey = encrypt(exportedKeyPair.privateKey);
+        const fingerprint = generateFingerprint(exportedKeyPair.publicKey);
+        // Check if we need to auto-activate (no active key exists)
+        const existingActive = await this.getActiveKey(type);
+        const shouldActivate = !existingActive;
+        const rotationDays = this.getRotationDays(type);
+        const expiresAt = addDays(now, rotationDays);
+        const metadata = {
+            id,
+            type,
+            algorithm: 'Ed25519/ECDSA-P256',
+            createdAt: now,
+            activatedAt: shouldActivate ? now : undefined,
+            expiresAt,
+            status: shouldActivate ? 'active' : 'pending',
+            version,
+            fingerprint,
+        };
+        const storedKey = {
+            metadata,
+            encryptedPrivateKey,
+            publicKey: exportedKeyPair.publicKey,
+        };
+        // Store in Redis
+        await redis.set(`${KEY_PREFIX}${id}`, serializeStoredKey(storedKey));
+        await redis.sadd(`${INDEX_PREFIX}${type}`, id);
+        // Set TTL based on expected lifecycle (keep for 1 year after expiration for auditing)
+        const ttlSeconds = (rotationDays + 365) * 24 * 60 * 60;
+        await redis.expire(`${KEY_PREFIX}${id}`, ttlSeconds);
+        logger.info({ keyId: id, type, version, status: metadata.status }, 'Key generated successfully');
+        return metadata;
+    }
+    /**
+     * Rotates the active key for a specific type.
+     */
+    async rotateKey(type) {
+        this.ensureInitialized();
+        logger.info({ type }, 'Starting key rotation');
+        const redis = this.getRedis();
+        const currentActive = await this.getActiveKey(type);
+        const now = new Date();
+        // Mark current active key as rotating
+        if (currentActive) {
+            currentActive.metadata.status = 'rotating';
+            currentActive.metadata.rotatedAt = now;
+            await redis.set(`${KEY_PREFIX}${currentActive.metadata.id}`, serializeStoredKey(currentActive));
+            logger.info({ keyId: currentActive.metadata.id }, 'Current key marked as rotating');
+            // Schedule retirement after overlap period
+            setTimeout(async () => {
+                try {
+                    await this.retireKey(currentActive.metadata.id, 'Scheduled retirement after rotation');
+                }
+                catch (error) {
+                    logger.error({ error, keyId: currentActive.metadata.id }, 'Failed to retire key');
+                }
+            }, this.config.keyOverlapDays * 24 * 60 * 60 * 1000);
+        }
+        // Generate and activate new key
+        const newMetadata = await this.generateKey(type);
+        // If the new key wasn't auto-activated, activate it now
+        if (newMetadata.status !== 'active') {
+            const newKey = await this.getKeyById(newMetadata.id);
+            if (newKey) {
+                newKey.metadata.status = 'active';
+                newKey.metadata.activatedAt = now;
+                await redis.set(`${KEY_PREFIX}${newMetadata.id}`, serializeStoredKey(newKey));
+                newMetadata.status = 'active';
+                newMetadata.activatedAt = now;
+            }
+        }
+        logger.info({ keyId: newMetadata.id, type, version: newMetadata.version }, 'Key rotation completed');
+        return newMetadata;
+    }
+    /**
+     * Retrieves a key by its ID.
+     */
+    async getKeyById(keyId) {
+        const redis = this.getRedis();
+        const data = await redis.get(`${KEY_PREFIX}${keyId}`);
+        return data ? deserializeStoredKey(data) : null;
+    }
+    /**
+     * Retrieves the currently active key for a specific type.
+     */
+    async getActiveKey(type) {
+        this.ensureInitialized();
+        const redis = this.getRedis();
+        const indexKey = `${INDEX_PREFIX}${type}`;
+        const keyIds = await redis.smembers(indexKey);
+        let activeKey = null;
+        let highestVersion = 0;
+        for (const keyId of keyIds) {
+            const data = await redis.get(`${KEY_PREFIX}${keyId}`);
+            if (data) {
+                const key = deserializeStoredKey(data);
+                if (key.metadata.status === 'active' && key.metadata.version > highestVersion) {
+                    activeKey = key;
+                    highestVersion = key.metadata.version;
+                }
+            }
+        }
+        return activeKey;
+    }
+    /**
+     * Retrieves all keys that are currently valid for verification.
+     */
+    async getActiveKeys(type) {
+        this.ensureInitialized();
+        const redis = this.getRedis();
+        const indexKey = `${INDEX_PREFIX}${type}`;
+        const keyIds = await redis.smembers(indexKey);
+        const keys = [];
+        for (const keyId of keyIds) {
+            const data = await redis.get(`${KEY_PREFIX}${keyId}`);
+            if (data) {
+                const key = deserializeStoredKey(data);
+                if (key.metadata.status === 'active' || key.metadata.status === 'rotating') {
+                    keys.push(key);
+                }
+            }
+        }
+        return keys.sort((a, b) => b.metadata.version - a.metadata.version);
+    }
+    /**
+     * Retrieves metadata for all key versions of a specific type.
+     */
+    async getAllKeyVersions(type) {
+        this.ensureInitialized();
+        const redis = this.getRedis();
+        const indexKey = `${INDEX_PREFIX}${type}`;
+        const keyIds = await redis.smembers(indexKey);
+        const metadata = [];
+        for (const keyId of keyIds) {
+            const data = await redis.get(`${KEY_PREFIX}${keyId}`);
+            if (data) {
+                const key = deserializeStoredKey(data);
+                metadata.push(key.metadata);
+            }
+        }
+        return metadata.sort((a, b) => b.version - a.version);
+    }
+    /**
+     * Retires a key, making it unavailable for new operations.
+     */
+    async retireKey(keyId, reason) {
+        this.ensureInitialized();
+        logger.info({ keyId, reason }, 'Retiring key');
+        const redis = this.getRedis();
+        const key = await this.getKeyById(keyId);
+        if (!key) {
+            throw new Error(`Key ${keyId} not found`);
+        }
+        if (key.metadata.status === 'retired') {
+            throw new Error(`Key ${keyId} is already retired`);
+        }
+        key.metadata.status = 'retired';
+        key.metadata.retiredAt = new Date();
+        await redis.set(`${KEY_PREFIX}${keyId}`, serializeStoredKey(key));
+        logger.info({ keyId, reason }, 'Key retired successfully');
+    }
+    /**
+     * Marks a key as compromised, immediately revoking it.
+     */
+    async compromiseKey(keyId, reason) {
+        this.ensureInitialized();
+        logger.warn({ keyId, reason }, 'SECURITY: Marking key as compromised');
+        const redis = this.getRedis();
+        const key = await this.getKeyById(keyId);
+        if (!key) {
+            throw new Error(`Key ${keyId} not found`);
+        }
+        key.metadata.status = 'compromised';
+        key.metadata.retiredAt = new Date();
+        await redis.set(`${KEY_PREFIX}${keyId}`, serializeStoredKey(key));
+        logger.warn({ keyId, reason }, 'SECURITY: Key marked as compromised - immediate revocation');
+    }
+    /**
+     * Configures and starts automatic key rotation scheduling.
+     */
+    scheduleRotation(config) {
+        this.ensureInitialized();
+        this.config = { ...this.config, ...config };
+        logger.info({ config: this.config }, 'Configuring rotation schedule');
+        // Clear existing timers
+        for (const timer of this.rotationTimers.values()) {
+            clearInterval(timer);
+        }
+        this.rotationTimers.clear();
+        if (!this.config.autoRotate) {
+            logger.info('Auto-rotation disabled');
+            return;
+        }
+        // Set up rotation checks for each key type
+        const keyTypes = ['signing', 'encryption', 'jwt'];
+        for (const type of keyTypes) {
+            const checkInterval = 24 * 60 * 60 * 1000; // Daily check
+            const timer = setInterval(async () => {
+                try {
+                    await this.checkAndRotate(type);
+                }
+                catch (error) {
+                    logger.error({ error, type }, 'Auto-rotation check failed');
+                }
+            }, checkInterval);
+            this.rotationTimers.set(type, timer);
+            // Also run an immediate check
+            this.checkAndRotate(type).catch((error) => {
+                logger.error({ error, type }, 'Initial rotation check failed');
+            });
+        }
+        logger.info('Auto-rotation scheduled for all key types');
+    }
+    /**
+     * Checks if a key type needs rotation and performs it if necessary.
+     */
+    async checkAndRotate(type) {
+        const activeKey = await this.getActiveKey(type);
+        if (!activeKey) {
+            logger.info({ type }, 'No active key found, generating initial key');
+            await this.generateKey(type);
+            return;
+        }
+        const now = new Date();
+        const expiresAt = activeKey.metadata.expiresAt;
+        if (!expiresAt) {
+            logger.warn({ type, keyId: activeKey.metadata.id }, 'Active key has no expiration date');
+            return;
+        }
+        const daysUntilExpiration = daysBetween(now, expiresAt);
+        // Check if we need to notify
+        if (daysUntilExpiration <= this.config.notifyBeforeDays && daysUntilExpiration > 0) {
+            logger.warn({ type, keyId: activeKey.metadata.id, daysUntilExpiration }, 'Key approaching expiration - notification would be sent');
+        }
+        // Check if rotation is needed
+        if (daysUntilExpiration <= 0) {
+            logger.info({ type, keyId: activeKey.metadata.id }, 'Key expired, initiating rotation');
+            await this.rotateKey(type);
+        }
+    }
+    /**
+     * Gets the current rotation status for all key types.
+     */
+    async getRotationStatus() {
+        this.ensureInitialized();
+        const keyTypes = ['signing', 'encryption', 'jwt'];
+        const statuses = [];
+        for (const type of keyTypes) {
+            const activeKey = await this.getActiveKey(type);
+            const activeKeys = await this.getActiveKeys(type);
+            const rotatingKeys = activeKeys.filter((k) => k.metadata.status === 'rotating');
+            const now = new Date();
+            let daysUntilExpiration = null;
+            let rotationNeeded = false;
+            let nextScheduledRotation = null;
+            let lastRotation = null;
+            if (activeKey?.metadata.expiresAt) {
+                daysUntilExpiration = daysBetween(now, activeKey.metadata.expiresAt);
+                rotationNeeded = daysUntilExpiration <= 0;
+                nextScheduledRotation = activeKey.metadata.expiresAt;
+            }
+            // Find last rotation from key history
+            const allVersions = await this.getAllKeyVersions(type);
+            const rotatedKeys = allVersions.filter((k) => k.rotatedAt);
+            if (rotatedKeys.length > 0) {
+                lastRotation = rotatedKeys.reduce((latest, key) => {
+                    if (!key.rotatedAt)
+                        return latest;
+                    return !latest || key.rotatedAt > latest ? key.rotatedAt : latest;
+                }, null);
+            }
+            statuses.push({
+                type,
+                activeKey: activeKey?.metadata ?? null,
+                keysInGracePeriod: rotatingKeys.length,
+                daysUntilExpiration,
+                rotationNeeded,
+                rotationInProgress: rotatingKeys.length > 0,
+                lastRotation,
+                nextScheduledRotation,
+            });
+        }
+        return statuses;
+    }
+    /**
+     * Stops all scheduled rotation timers.
+     */
+    shutdown() {
+        logger.info('Shutting down KeyRotationManager');
+        for (const timer of this.rotationTimers.values()) {
+            clearInterval(timer);
+        }
+        this.rotationTimers.clear();
+        this.initialized = false;
+    }
+}
+// ============================================================================
+// Singleton Instance
+// ============================================================================
+let instance = null;
+/**
+ * Gets the singleton instance of the KeyRotationManager.
+ */
+export function getKeyRotationManager() {
+    if (!instance) {
+        instance = new KeyRotationManager();
+    }
+    return instance;
+}
+/**
+ * Resets the singleton instance (primarily for testing).
+ */
+export function resetKeyRotationManager() {
+    if (instance) {
+        instance.shutdown();
+    }
+    instance = null;
+}
+// ============================================================================
+// Exports
+// ============================================================================
+export { DEFAULT_CONFIG as defaultKeyRotationConfig };
+//# sourceMappingURL=key-rotation.js.map

package/dist/security/key-rotation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-rotation.js","sourceRoot":"","sources":["../../src/security/key-rotation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,eAAe,EACf,aAAa,GAOd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAmC,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AAgG3D,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,uCAAuC;AACvC,MAAM,UAAU,GAAG,cAAc,CAAC;AAElC,4CAA4C;AAC5C,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C,qCAAqC;AACrC,MAAM,cAAc,GAAsB;IACxC,sBAAsB,EAAE,EAAE;IAC1B,yBAAyB,EAAE,GAAG;IAC9B,kBAAkB,EAAE,EAAE;IACtB,cAAc,EAAE,CAAC;IACjB,UAAU,EAAE,KAAK;IACjB,gBAAgB,EAAE,EAAE;CACrB,CAAC;AAEF,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,KAAW,EAAE,KAAW;IAC3C,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,SAAS,OAAO,CAAC,IAAU,EAAE,IAAY;IACvC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,GAAc;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,EAAE;YACR,GAAG,GAAG,CAAC,QAAQ;YACf,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE;YAC/C,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE;YACpD,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE;YAChD,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE;YAChD,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE;SACjD;QACD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE;YACR,GAAG,MAAM,CAAC,QAAQ;YAClB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC9C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5F,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YACtF,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YACtF,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SACvF;QACD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,kBAAkB;IACrB,MAAM,GAAsB,EAAE,GAAG,cAAc,EAAE,CAAC;IAClD,WAAW,GAAG,KAAK,CAAC;IACpB,cAAc,GAAiC,IAAI,GAAG,EAAE,CAAC;IACzD,KAAK,GAAiB,IAAI,CAAC;IAEnC;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAE/C,IAAI,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED;;OAEG;IACK,QAAQ;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,KAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAAC,IAAa;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,CAAC,CAAC;YACtD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;oBACtC,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAa;QACnC,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;YAC5C,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC;YAC/C,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,IAAa;QAC7B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,iDAAiD;QACjD,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;QACxC,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAErD,oDAAoD;QACpD,MAAM,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,mBAAmB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEnE,2DAA2D;QAC3D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,CAAC,cAAc,CAAC;QAEvC,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAE7C,MAAM,QAAQ,GAAgB;YAC5B,EAAE;YACF,IAAI;YACJ,SAAS,EAAE,oBAAoB;YAC/B,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC7C,SAAS;YACT,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YAC7C,OAAO;YACP,WAAW;SACZ,CAAC;QAEF,MAAM,SAAS,GAAc;YAC3B,QAAQ;YACR,mBAAmB;YACnB,SAAS,EAAE,eAAe,CAAC,SAAS;SACrC,CAAC;QAEF,iBAAiB;QACjB,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,EAAE,EAAE,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,sFAAsF;QACtF,MAAM,UAAU,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,UAAU,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAErD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACjG,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,IAAa;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,sCAAsC;QACtC,IAAI,aAAa,EAAE,CAAC;YAClB,aAAa,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YAC3C,aAAa,CAAC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;YACvC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;YAChG,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAEpF,2CAA2C;YAC3C,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,qCAAqC,CAAC,CAAC;gBACzF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,gCAAgC;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjD,wDAAwD;QACxD,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAClC,MAAM,CAAC,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC;gBAClC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9E,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC9B,WAAW,CAAC,WAAW,GAAG,GAAG,CAAC;YAChC,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACrG,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,IAAa;QAC9B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,SAAS,GAAqB,IAAI,CAAC;QACvC,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,CAAC,CAAC;YACtD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,cAAc,EAAE,CAAC;oBAC9E,SAAS,GAAG,GAAG,CAAC;oBAChB,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,IAAa;QAC/B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAgB,EAAE,CAAC;QAE7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,CAAC,CAAC;YACtD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAC3E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,IAAa;QACnC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAkB,EAAE,CAAC;QAEnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,CAAC,CAAC;YACtD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACvC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAC3C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAC;QACrD,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QAChC,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAEpC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;QAElE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,MAAc;QAC/C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,sCAAsC,CAAC,CAAC;QAEvE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAEpC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,KAAK,EAAE,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;QAElE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,4DAA4D,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAyB;QACxC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAE5C,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAEtE,wBAAwB;QACxB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAE5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,2CAA2C;QAC3C,MAAM,QAAQ,GAAc,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAE7D,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,cAAc;YAEzD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;gBACnC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC,EAAE,aAAa,CAAC,CAAC;YAElB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAErC,8BAA8B;YAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAAC,IAAa;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,6CAA6C,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;QAE/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,mCAAmC,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QAED,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAExD,6BAA6B;QAC7B,IAAI,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,mBAAmB,EAAE,EAC3D,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,IAAI,mBAAmB,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,kCAAkC,CAAC,CAAC;YACxF,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,QAAQ,GAAc,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAqB,EAAE,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;YAEhF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,mBAAmB,GAAkB,IAAI,CAAC;YAC9C,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,qBAAqB,GAAgB,IAAI,CAAC;YAC9C,IAAI,YAAY,GAAgB,IAAI,CAAC;YAErC,IAAI,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAClC,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACrE,cAAc,GAAG,mBAAmB,IAAI,CAAC,CAAC;gBAC1C,qBAAqB,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;YACvD,CAAC;YAED,sCAAsC;YACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;oBAChD,IAAI,CAAC,GAAG,CAAC,SAAS;wBAAE,OAAO,MAAM,CAAC;oBAClC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpE,CAAC,EAAE,IAAmB,CAAC,CAAC;YAC1B,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,SAAS,EAAE,SAAS,EAAE,QAAQ,IAAI,IAAI;gBACtC,iBAAiB,EAAE,YAAY,CAAC,MAAM;gBACtC,mBAAmB;gBACnB,cAAc;gBACd,kBAAkB,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;gBAC3C,YAAY;gBACZ,qBAAqB;aACtB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;CACF;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,IAAI,QAAQ,GAA8B,IAAI,CAAC;AAE/C;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,OAAO,EAAE,cAAc,IAAI,wBAAwB,EAAE,CAAC"}