@vorionsys/security 1.0.0

package/dist/security/policy-engine/rule-evaluator.js

@@ -0,0 +1,593 @@
+/**
+ * Rule Evaluator
+ *
+ * Evaluates policy rules and determines enforcement actions.
+ * Supports all rule types: MFA, approval, block, rate-limit, encryption, audit, etc.
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../../common/logger.js';
+const logger = createLogger({ component: 'rule-evaluator' });
+/**
+ * RuleEvaluator class
+ */
+export class RuleEvaluator {
+    rateLimiter;
+    geoLocationProvider;
+    customHandlers;
+    defaultMfaTimeout;
+    defaultApprovalTimeout;
+    defaultSessionIdleTimeout;
+    constructor(options = {}) {
+        this.rateLimiter = options.rateLimiter;
+        this.geoLocationProvider = options.geoLocationProvider;
+        this.customHandlers = options.customHandlers ?? new Map();
+        this.defaultMfaTimeout = options.defaultMfaTimeout ?? 300;
+        this.defaultApprovalTimeout = options.defaultApprovalTimeout ?? 3600;
+        this.defaultSessionIdleTimeout = options.defaultSessionIdleTimeout ?? 1800;
+    }
+    /**
+     * Evaluate a rule against the context
+     */
+    async evaluate(rule, context) {
+        try {
+            if (!rule.enforced) {
+                return {
+                    ruleType: rule.type,
+                    enforced: false,
+                    passed: true,
+                    reason: 'Rule is not enforced',
+                };
+            }
+            switch (rule.type) {
+                case 'require_mfa':
+                    return this.evaluateMFA(rule, context);
+                case 'require_approval':
+                    return this.evaluateApproval(rule, context);
+                case 'block_access':
+                    return this.evaluateBlockAccess(rule, context);
+                case 'rate_limit':
+                    return this.evaluateRateLimit(rule, context);
+                case 'require_encryption':
+                    return this.evaluateEncryption(rule, context);
+                case 'audit_log':
+                    return this.evaluateAuditLog(rule, context);
+                case 'step_up_auth':
+                    return this.evaluateStepUpAuth(rule, context);
+                case 'data_masking':
+                    return this.evaluateDataMasking(rule, context);
+                case 'session_timeout':
+                    return this.evaluateSessionTimeout(rule, context);
+                case 'geo_restriction':
+                    return this.evaluateGeoRestriction(rule, context);
+                case 'custom':
+                    return this.evaluateCustom(rule, context);
+                default:
+                    return {
+                        ruleType: rule.type,
+                        enforced: true,
+                        passed: false,
+                        reason: `Unknown rule type: ${rule.type}`,
+                    };
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            logger.warn({ rule, error: message }, 'Rule evaluation failed');
+            return {
+                ruleType: rule.type,
+                enforced: true,
+                passed: false,
+                reason: `Evaluation error: ${message}`,
+            };
+        }
+    }
+    /**
+     * Evaluate all rules and return results
+     */
+    async evaluateAll(rules, context) {
+        const results = [];
+        for (const rule of rules) {
+            const result = await this.evaluate(rule, context);
+            results.push(result);
+        }
+        return results;
+    }
+    /**
+     * Evaluate MFA requirement
+     */
+    evaluateMFA(rule, context) {
+        const user = context.user;
+        // Check if MFA has been verified
+        if (!user?.mfaVerified) {
+            return {
+                ruleType: 'require_mfa',
+                enforced: true,
+                passed: false,
+                reason: 'MFA verification required',
+                metadata: {
+                    methods: rule.methods,
+                    timeout: rule.timeout ?? this.defaultMfaTimeout,
+                },
+            };
+        }
+        // Check if MFA is still valid (within timeout)
+        if (rule.timeout && user.lastMfaAt) {
+            const lastMfaTime = new Date(user.lastMfaAt).getTime();
+            const now = Date.now();
+            const timeoutMs = (rule.timeout ?? this.defaultMfaTimeout) * 1000;
+            if (now - lastMfaTime > timeoutMs) {
+                return {
+                    ruleType: 'require_mfa',
+                    enforced: true,
+                    passed: false,
+                    reason: 'MFA verification expired',
+                    metadata: {
+                        expiredAt: new Date(lastMfaTime + timeoutMs).toISOString(),
+                    },
+                };
+            }
+        }
+        return {
+            ruleType: 'require_mfa',
+            enforced: true,
+            passed: true,
+            reason: 'MFA verification passed',
+        };
+    }
+    /**
+     * Evaluate approval requirement
+     */
+    evaluateApproval(rule, context) {
+        // Check if approval has been granted (would be in custom context)
+        const approved = context.custom?.approvalGranted === true;
+        const approvalId = context.custom?.approvalId;
+        if (approved && approvalId) {
+            return {
+                ruleType: 'require_approval',
+                enforced: true,
+                passed: true,
+                reason: 'Approval granted',
+                metadata: { approvalId },
+            };
+        }
+        return {
+            ruleType: 'require_approval',
+            enforced: true,
+            passed: false,
+            reason: 'Approval required',
+            metadata: {
+                approvers: rule.approvers,
+                approverRoles: rule.approverRoles,
+                timeout: rule.approvalTimeout ?? this.defaultApprovalTimeout,
+                minApprovers: rule.minApprovers ?? 1,
+                requireJustification: rule.requireJustification ?? false,
+            },
+        };
+    }
+    /**
+     * Evaluate block access rule
+     */
+    evaluateBlockAccess(rule, context) {
+        // Block access rules always fail when enforced
+        return {
+            ruleType: 'block_access',
+            enforced: true,
+            passed: false,
+            reason: rule.reason ?? 'Access blocked by policy',
+            metadata: {
+                errorCode: rule.errorCode,
+                redirectUrl: rule.redirectUrl,
+            },
+        };
+    }
+    /**
+     * Evaluate rate limit rule
+     */
+    async evaluateRateLimit(rule, context) {
+        if (!this.rateLimiter) {
+            logger.warn('Rate limiter not configured, skipping rate limit rule');
+            return {
+                ruleType: 'rate_limit',
+                enforced: true,
+                passed: true,
+                reason: 'Rate limiter not configured',
+            };
+        }
+        // Build rate limit key
+        const keyParts = ['policy-rl'];
+        const keyBy = rule.keyBy ?? ['user'];
+        for (const keyType of keyBy) {
+            switch (keyType) {
+                case 'user':
+                    if (context.user?.id)
+                        keyParts.push(`u:${context.user.id}`);
+                    break;
+                case 'ip':
+                    keyParts.push(`ip:${context.request.ip}`);
+                    break;
+                case 'tenant':
+                    if (context.user?.tenant)
+                        keyParts.push(`t:${context.user.tenant}`);
+                    break;
+                case 'api_key':
+                    const apiKey = context.request.headers?.['x-api-key'];
+                    if (typeof apiKey === 'string')
+                        keyParts.push(`ak:${apiKey.slice(0, 8)}`);
+                    break;
+                case 'custom':
+                    if (rule.customKey) {
+                        const customValue = this.getNestedValue(context, rule.customKey);
+                        if (customValue)
+                            keyParts.push(`c:${String(customValue)}`);
+                    }
+                    break;
+            }
+        }
+        const key = keyParts.join(':');
+        // Calculate window in seconds
+        const windowMultiplier = {
+            second: 1,
+            minute: 60,
+            hour: 3600,
+            day: 86400,
+        };
+        const windowSeconds = rule.window * (windowMultiplier[rule.windowUnit ?? 'second'] ?? 1);
+        try {
+            const result = await this.rateLimiter.check(key, rule.limit, windowSeconds);
+            if (!result.allowed) {
+                return {
+                    ruleType: 'rate_limit',
+                    enforced: true,
+                    passed: false,
+                    reason: 'Rate limit exceeded',
+                    metadata: {
+                        limit: rule.limit,
+                        remaining: result.remaining,
+                        resetAt: result.resetAt,
+                        retryAfter: rule.retryAfter ?? Math.ceil((result.resetAt - Date.now()) / 1000),
+                    },
+                };
+            }
+            return {
+                ruleType: 'rate_limit',
+                enforced: true,
+                passed: true,
+                reason: 'Within rate limit',
+                metadata: {
+                    limit: rule.limit,
+                    remaining: result.remaining,
+                },
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            logger.error({ error: message, key }, 'Rate limit check failed');
+            // Fail open or closed based on configuration
+            return {
+                ruleType: 'rate_limit',
+                enforced: true,
+                passed: true,
+                reason: `Rate limit check failed: ${message}`,
+            };
+        }
+    }
+    /**
+     * Evaluate encryption requirement
+     */
+    evaluateEncryption(rule, context) {
+        // Check if connection is encrypted (HTTPS)
+        const isSecure = context.request.url.startsWith('https://') ||
+            context.request.headers?.['x-forwarded-proto'] === 'https';
+        if (!isSecure) {
+            return {
+                ruleType: 'require_encryption',
+                enforced: true,
+                passed: false,
+                reason: 'Encrypted connection required',
+                metadata: {
+                    fields: rule.fields,
+                    algorithm: rule.algorithm,
+                },
+            };
+        }
+        // If specific fields need encryption, that would be handled by the application
+        return {
+            ruleType: 'require_encryption',
+            enforced: true,
+            passed: true,
+            reason: 'Encryption requirements met',
+            metadata: {
+                fields: rule.fields,
+                algorithm: rule.algorithm,
+            },
+        };
+    }
+    /**
+     * Evaluate audit log rule
+     */
+    evaluateAuditLog(rule, context) {
+        // Audit rules always pass - they're informational
+        return {
+            ruleType: 'audit_log',
+            enforced: true,
+            passed: true,
+            reason: 'Audit logging enabled',
+            metadata: {
+                level: rule.level ?? 'basic',
+                includeRequest: rule.includeRequest ?? false,
+                includeResponse: rule.includeResponse ?? false,
+                destination: rule.destination,
+            },
+        };
+    }
+    /**
+     * Evaluate step-up authentication rule
+     */
+    evaluateStepUpAuth(rule, context) {
+        // Check current authentication level from context
+        const currentLevel = context.custom?.authLevel ?? 0;
+        if (currentLevel < rule.requiredLevel) {
+            return {
+                ruleType: 'step_up_auth',
+                enforced: true,
+                passed: false,
+                reason: 'Step-up authentication required',
+                metadata: {
+                    currentLevel,
+                    requiredLevel: rule.requiredLevel,
+                    method: rule.method,
+                    timeout: rule.timeout,
+                },
+            };
+        }
+        return {
+            ruleType: 'step_up_auth',
+            enforced: true,
+            passed: true,
+            reason: 'Authentication level sufficient',
+            metadata: {
+                currentLevel,
+                requiredLevel: rule.requiredLevel,
+            },
+        };
+    }
+    /**
+     * Evaluate data masking rule
+     */
+    evaluateDataMasking(rule, context) {
+        // Data masking is applied on response - this just indicates it should be applied
+        return {
+            ruleType: 'data_masking',
+            enforced: true,
+            passed: true,
+            reason: 'Data masking will be applied',
+            metadata: {
+                fields: rule.fields,
+                maskType: rule.maskType ?? 'partial',
+                partialMaskPattern: rule.partialMaskPattern,
+            },
+        };
+    }
+    /**
+     * Evaluate session timeout rule
+     */
+    evaluateSessionTimeout(rule, context) {
+        const user = context.user;
+        if (!user?.sessionStartedAt) {
+            return {
+                ruleType: 'session_timeout',
+                enforced: true,
+                passed: true,
+                reason: 'No session information available',
+            };
+        }
+        const sessionStartTime = new Date(user.sessionStartedAt).getTime();
+        const now = Date.now();
+        // Check max session duration
+        if (rule.maxDuration) {
+            const maxDurationMs = rule.maxDuration * 1000;
+            if (now - sessionStartTime > maxDurationMs) {
+                return {
+                    ruleType: 'session_timeout',
+                    enforced: true,
+                    passed: false,
+                    reason: 'Session duration exceeded',
+                    metadata: {
+                        maxDuration: rule.maxDuration,
+                        sessionAge: Math.floor((now - sessionStartTime) / 1000),
+                        requireReauth: rule.requireReauth ?? true,
+                    },
+                };
+            }
+        }
+        // Idle timeout would need last activity tracking in context
+        const lastActivity = context.custom?.lastActivityAt ?? user.sessionStartedAt;
+        const lastActivityTime = new Date(lastActivity).getTime();
+        const idleTimeout = rule.idleTimeout ?? this.defaultSessionIdleTimeout;
+        const idleTimeoutMs = idleTimeout * 1000;
+        if (now - lastActivityTime > idleTimeoutMs) {
+            return {
+                ruleType: 'session_timeout',
+                enforced: true,
+                passed: false,
+                reason: 'Session idle timeout exceeded',
+                metadata: {
+                    idleTimeout,
+                    idleDuration: Math.floor((now - lastActivityTime) / 1000),
+                    requireReauth: rule.requireReauth ?? true,
+                },
+            };
+        }
+        return {
+            ruleType: 'session_timeout',
+            enforced: true,
+            passed: true,
+            reason: 'Session is valid',
+            metadata: {
+                sessionAge: Math.floor((now - sessionStartTime) / 1000),
+                idleDuration: Math.floor((now - lastActivityTime) / 1000),
+            },
+        };
+    }
+    /**
+     * Evaluate geo restriction rule
+     */
+    async evaluateGeoRestriction(rule, context) {
+        let geoInfo = context.environment?.geoLocation;
+        // Try to look up geo info if not provided
+        if (!geoInfo && this.geoLocationProvider) {
+            try {
+                geoInfo = await this.geoLocationProvider.lookup(context.request.ip) ?? undefined;
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : 'Unknown error';
+                logger.warn({ error: message, ip: context.request.ip }, 'Geo lookup failed');
+            }
+        }
+        if (!geoInfo?.country) {
+            // If we can't determine location, fail closed
+            return {
+                ruleType: 'geo_restriction',
+                enforced: true,
+                passed: false,
+                reason: 'Unable to determine geo location',
+            };
+        }
+        const country = geoInfo.country.toUpperCase();
+        const region = geoInfo.region?.toUpperCase();
+        // Check blocked countries
+        if (rule.blockedCountries?.length) {
+            const blockedCountries = rule.blockedCountries.map(c => c.toUpperCase());
+            if (blockedCountries.includes(country)) {
+                return {
+                    ruleType: 'geo_restriction',
+                    enforced: true,
+                    passed: false,
+                    reason: `Access blocked from country: ${country}`,
+                    metadata: { country, region },
+                };
+            }
+        }
+        // Check allowed countries
+        if (rule.allowedCountries?.length) {
+            const allowedCountries = rule.allowedCountries.map(c => c.toUpperCase());
+            if (!allowedCountries.includes(country)) {
+                return {
+                    ruleType: 'geo_restriction',
+                    enforced: true,
+                    passed: false,
+                    reason: `Access not allowed from country: ${country}`,
+                    metadata: { country, region },
+                };
+            }
+        }
+        // Check blocked regions
+        if (rule.blockedRegions?.length && region) {
+            const blockedRegions = rule.blockedRegions.map(r => r.toUpperCase());
+            if (blockedRegions.includes(region) || blockedRegions.includes(`${country}-${region}`)) {
+                return {
+                    ruleType: 'geo_restriction',
+                    enforced: true,
+                    passed: false,
+                    reason: `Access blocked from region: ${region}`,
+                    metadata: { country, region },
+                };
+            }
+        }
+        // Check allowed regions
+        if (rule.allowedRegions?.length && region) {
+            const allowedRegions = rule.allowedRegions.map(r => r.toUpperCase());
+            if (!allowedRegions.includes(region) && !allowedRegions.includes(`${country}-${region}`)) {
+                return {
+                    ruleType: 'geo_restriction',
+                    enforced: true,
+                    passed: false,
+                    reason: `Access not allowed from region: ${region}`,
+                    metadata: { country, region },
+                };
+            }
+        }
+        return {
+            ruleType: 'geo_restriction',
+            enforced: true,
+            passed: true,
+            reason: 'Geo restriction passed',
+            metadata: { country, region },
+        };
+    }
+    /**
+     * Evaluate custom rule
+     */
+    async evaluateCustom(rule, context) {
+        const handler = this.customHandlers.get(rule.handler);
+        if (!handler) {
+            return {
+                ruleType: 'custom',
+                enforced: true,
+                passed: false,
+                reason: `No handler registered for: ${rule.handler}`,
+            };
+        }
+        try {
+            return await handler(rule, context);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                ruleType: 'custom',
+                enforced: true,
+                passed: false,
+                reason: `Custom handler error: ${message}`,
+            };
+        }
+    }
+    /**
+     * Get nested value from object using dot notation
+     */
+    getNestedValue(obj, path) {
+        if (obj === null || obj === undefined)
+            return undefined;
+        const parts = path.split('.');
+        let current = obj;
+        for (const part of parts) {
+            if (current === null || current === undefined)
+                return undefined;
+            if (typeof current !== 'object')
+                return undefined;
+            current = current[part];
+        }
+        return current;
+    }
+    /**
+     * Register a custom rule handler
+     */
+    registerCustomHandler(name, handler) {
+        this.customHandlers.set(name, handler);
+    }
+    /**
+     * Unregister a custom rule handler
+     */
+    unregisterCustomHandler(name) {
+        return this.customHandlers.delete(name);
+    }
+    /**
+     * Set rate limiter
+     */
+    setRateLimiter(rateLimiter) {
+        this.rateLimiter = rateLimiter;
+    }
+    /**
+     * Set geo location provider
+     */
+    setGeoLocationProvider(provider) {
+        this.geoLocationProvider = provider;
+    }
+}
+/**
+ * Create a rule evaluator instance
+ */
+export function createRuleEvaluator(options) {
+    return new RuleEvaluator(options);
+}
+//# sourceMappingURL=rule-evaluator.js.map

package/dist/security/policy-engine/rule-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-evaluator.js","sourceRoot":"","sources":["../../../src/security/policy-engine/rule-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAkBtD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;AA2C7D;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,WAAW,CAAe;IAC1B,mBAAmB,CAAuB;IAC1C,cAAc,CAAiC;IAC/C,iBAAiB,CAAS;IAC1B,sBAAsB,CAAS;IAC/B,yBAAyB,CAAS;IAE1C,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,GAAG,EAAE,CAAC;QAC1D,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,GAAG,CAAC;QAC1D,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC;QACrE,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,IAAI,IAAI,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAgB,EAAE,OAAsB;QACrD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,sBAAsB;iBAC/B,CAAC;YACJ,CAAC;YAED,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,KAAK,aAAa;oBAChB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACzC,KAAK,kBAAkB;oBACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9C,KAAK,cAAc;oBACjB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjD,KAAK,YAAY;oBACf,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/C,KAAK,oBAAoB;oBACvB,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAChD,KAAK,WAAW;oBACd,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9C,KAAK,cAAc;oBACjB,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAChD,KAAK,cAAc;oBACjB,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjD,KAAK,iBAAiB;oBACpB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACpD,KAAK,iBAAiB;oBACpB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACpD,KAAK,QAAQ;oBACX,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5C;oBACE,OAAO;wBACL,QAAQ,EAAG,IAAmB,CAAC,IAAI;wBACnC,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,sBAAuB,IAAmB,CAAC,IAAI,EAAE;qBAC1D,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAC;YAChE,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,qBAAqB,OAAO,EAAE;aACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,KAAmB,EACnB,OAAsB;QAEtB,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,IAAa,EAAE,OAAsB;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,iCAAiC;QACjC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,2BAA2B;gBACnC,QAAQ,EAAE;oBACR,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAiB;iBAChD;aACF,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC;YAElE,IAAI,GAAG,GAAG,WAAW,GAAG,SAAS,EAAE,CAAC;gBAClC,OAAO;oBACL,QAAQ,EAAE,aAAa;oBACvB,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,0BAA0B;oBAClC,QAAQ,EAAE;wBACR,SAAS,EAAE,IAAI,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE;qBAC3D;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,yBAAyB;SAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,IAAkB,EAAE,OAAsB;QACjE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,UAAgC,CAAC;QAEpE,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC3B,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,kBAAkB;gBAC1B,QAAQ,EAAE,EAAE,UAAU,EAAE;aACzB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,mBAAmB;YAC3B,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,sBAAsB;gBAC5D,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC;gBACpC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,KAAK;aACzD;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,IAAqB,EAAE,OAAsB;QACvE,+CAA+C;QAC/C,OAAO;YACL,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,0BAA0B;YACjD,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAAC,IAAmB,EAAE,OAAsB;QACzE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO;gBACL,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,6BAA6B;aACtC,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,MAAM,QAAQ,GAAa,CAAC,WAAW,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,MAAM;oBACT,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE;wBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5D,MAAM;gBACR,KAAK,IAAI;oBACP,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC1C,MAAM;gBACR,KAAK,QAAQ;oBACX,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM;wBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;oBACpE,MAAM;gBACR,KAAK,SAAS;oBACZ,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC;oBACtD,IAAI,OAAO,MAAM,KAAK,QAAQ;wBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC1E,MAAM;gBACR,KAAK,QAAQ;oBACX,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACnB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;wBACjE,IAAI,WAAW;4BAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;oBAC7D,CAAC;oBACD,MAAM;YACV,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE/B,8BAA8B;QAC9B,MAAM,gBAAgB,GAAG;YACvB,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,KAAK;SACX,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAE5E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,qBAAqB;oBAC7B,QAAQ,EAAE;wBACR,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;qBAC/E;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE;oBACR,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,yBAAyB,CAAC,CAAC;YACjE,6CAA6C;YAC7C,OAAO;gBACL,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,4BAA4B,OAAO,EAAE;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,IAAoB,EAAE,OAAsB;QACrE,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;YACzD,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,KAAK,OAAO,CAAC;QAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,+BAA+B;gBACvC,QAAQ,EAAE;oBACR,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B;aACF,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,OAAO;YACL,QAAQ,EAAE,oBAAoB;YAC9B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6BAA6B;YACrC,QAAQ,EAAE;gBACR,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,IAAkB,EAAE,OAAsB;QACjE,kDAAkD;QAClD,OAAO;YACL,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE;gBACR,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO;gBAC5B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;gBAC5C,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK;gBAC9C,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,IAAoB,EAAE,OAAsB;QACrE,kDAAkD;QAClD,MAAM,YAAY,GAAI,OAAO,CAAC,MAAM,EAAE,SAAoB,IAAI,CAAC,CAAC;QAEhE,IAAI,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,OAAO;gBACL,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,iCAAiC;gBACzC,QAAQ,EAAE;oBACR,YAAY;oBACZ,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iCAAiC;YACzC,QAAQ,EAAE;gBACR,YAAY;gBACZ,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,IAAqB,EAAE,OAAsB;QACvE,iFAAiF;QACjF,OAAO;YACL,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,8BAA8B;YACtC,QAAQ,EAAE;gBACR,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;gBACpC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAwB,EAAE,OAAsB;QAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAC5B,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,kCAAkC;aAC3C,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,6BAA6B;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC9C,IAAI,GAAG,GAAG,gBAAgB,GAAG,aAAa,EAAE,CAAC;gBAC3C,OAAO;oBACL,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,2BAA2B;oBACnC,QAAQ,EAAE;wBACR,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC;wBACvD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;qBAC1C;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,MAAM,YAAY,GAAI,OAAO,CAAC,MAAM,EAAE,cAAyB,IAAI,IAAI,CAAC,gBAAgB,CAAC;QACzF,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,yBAAyB,CAAC;QACvE,MAAM,aAAa,GAAG,WAAW,GAAG,IAAI,CAAC;QAEzC,IAAI,GAAG,GAAG,gBAAgB,GAAG,aAAa,EAAE,CAAC;YAC3C,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,+BAA+B;gBACvC,QAAQ,EAAE;oBACR,WAAW;oBACX,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC;oBACzD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;iBAC1C;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE;gBACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC;gBACvD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC;aAC1D;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAAC,IAAwB,EAAE,OAAsB;QACnF,IAAI,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC;QAE/C,0CAA0C;QAC1C,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;YACnF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,8CAA8C;YAC9C,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,kCAAkC;aAC3C,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QAE7C,0BAA0B;QAC1B,IAAI,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACzE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,OAAO;oBACL,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,gCAAgC,OAAO,EAAE;oBACjD,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;iBAC9B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,oCAAoC,OAAO,EAAE;oBACrD,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;iBAC9B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,IAAI,CAAC,cAAc,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;YAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;gBACvF,OAAO;oBACL,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,+BAA+B,MAAM,EAAE;oBAC/C,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;iBAC9B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,IAAI,CAAC,cAAc,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;YAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;gBACzF,OAAO;oBACL,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,mCAAmC,MAAM,EAAE;oBACnD,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;iBAC9B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAAC,IAAgB,EAAE,OAAsB;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,8BAA8B,IAAI,CAAC,OAAO,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,yBAAyB,OAAO,EAAE;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAY,EAAE,IAAY;QAC/C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAExD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAY,GAAG,CAAC;QAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChE,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAClD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,IAAY,EAAE,OAA0B;QAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,WAAwB;QACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,QAA6B;QAClD,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA8B;IAChE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}