@vorionsys/security 1.0.0

package/dist/security/session-store.js

@@ -0,0 +1,581 @@
+/**
+ * Session Store - Redis-backed session persistence
+ *
+ * Provides secure session storage with support for:
+ * - Session creation and retrieval
+ * - Session revocation with immediate propagation across instances
+ * - Automatic expiration
+ * - Device tracking
+ * - Pub/sub for instant revocation notification
+ * - Graceful handling of Redis unavailability
+ *
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import { createLogger } from '../common/logger.js';
+import { getRedis, checkRedisHealth } from '../common/redis.js';
+import { getSecurityAuditLogger, } from '../audit/security-logger.js';
+const logger = createLogger({ component: 'session-store' });
+// =============================================================================
+// Zod Schemas for Session Data Validation
+// =============================================================================
+/**
+ * Schema for validating stored session data from Redis
+ */
+const storedSessionSchema = z.object({
+    id: z.string().uuid(),
+    userId: z.string().min(1),
+    tenantId: z.string().min(1),
+    deviceFingerprint: z.string().optional(),
+    ipAddress: z.string(),
+    userAgent: z.string(),
+    createdAt: z.string().datetime(),
+    lastActivityAt: z.string().datetime(),
+    expiresAt: z.string().datetime(),
+    revoked: z.boolean(),
+    revokedAt: z.string().datetime().optional(),
+    revokedReason: z.string().optional(),
+    revokedBy: z.string().optional(),
+    metadata: z.record(z.string(), z.unknown()).optional(),
+});
+/**
+ * Schema for validating session revocation events from pub/sub
+ */
+const sessionRevocationEventSchema = z.object({
+    sessionId: z.string().min(1),
+    userId: z.string().min(1),
+    reason: z.string(),
+    revokedBy: z.string(),
+    timestamp: z.number().positive(),
+    sourceInstance: z.string().min(1),
+});
+/**
+ * Build security actor for session operations
+ */
+function buildSessionActor(userId, tenantId, ipAddress, userAgent, sessionId) {
+    return {
+        type: 'user',
+        id: userId,
+        tenantId,
+        ip: ipAddress,
+        userAgent,
+        sessionId,
+    };
+}
+/** Redis pub/sub channel for session revocation events */
+const SESSION_REVOCATION_CHANNEL = 'vorion:session:revocation';
+/** Local cache of revoked session IDs for fast validation */
+const revokedSessionsCache = new Map();
+/** Maximum size of revoked sessions cache */
+const MAX_REVOKED_CACHE_SIZE = 10000;
+/** TTL for cached revoked sessions in milliseconds */
+const REVOKED_CACHE_TTL = 300000; // 5 minutes
+const DEFAULT_CONFIG = {
+    keyPrefix: 'vorion:session',
+    defaultTTL: 86400, // 24 hours
+    maxSessionsPerUser: 10,
+    trackActivity: true,
+};
+/**
+ * Redis-backed session store with pub/sub revocation propagation
+ */
+export class SessionStore {
+    config;
+    redis = null;
+    subscriber = null;
+    instanceId;
+    isSubscribed = false;
+    cleanupInterval = null;
+    securityLogger;
+    constructor(config = {}, securityLogger) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        this.instanceId = crypto.randomUUID();
+        this.securityLogger = securityLogger ?? getSecurityAuditLogger();
+        // Start cleanup interval for revoked sessions cache
+        this.startCacheCleanup();
+    }
+    /**
+     * Get Redis client, initializing if needed
+     */
+    async getRedis() {
+        if (!this.redis) {
+            this.redis = getRedis();
+            // Subscribe to revocation events
+            await this.subscribeToRevocations();
+        }
+        return this.redis;
+    }
+    /**
+     * Subscribe to session revocation events for cross-instance propagation
+     */
+    async subscribeToRevocations() {
+        if (this.isSubscribed || this.subscriber) {
+            return;
+        }
+        try {
+            // Create a separate connection for subscribing
+            this.subscriber = getRedis().duplicate();
+            await this.subscriber.subscribe(SESSION_REVOCATION_CHANNEL);
+            this.subscriber.on('message', (channel, message) => {
+                if (channel === SESSION_REVOCATION_CHANNEL) {
+                    try {
+                        const parsed = JSON.parse(message);
+                        const validated = sessionRevocationEventSchema.safeParse(parsed);
+                        if (!validated.success) {
+                            logger.warn({
+                                errors: validated.error.errors,
+                                operation: 'subscribeToRevocations',
+                            }, 'Session revocation event validation failed');
+                            return;
+                        }
+                        const event = validated.data;
+                        // Don't process our own events
+                        if (event.sourceInstance === this.instanceId) {
+                            return;
+                        }
+                        // Add to local revoked cache for fast validation
+                        this.addToRevokedCache(event.sessionId);
+                        logger.debug({ sessionId: event.sessionId, reason: event.reason }, 'Received session revocation event from another instance');
+                    }
+                    catch (error) {
+                        logger.error({
+                            error: error instanceof Error ? error.message : String(error),
+                            rawMessage: message.substring(0, 200),
+                            operation: 'subscribeToRevocations',
+                        }, 'Failed to parse session revocation event');
+                    }
+                }
+            });
+            this.isSubscribed = true;
+            logger.info('Subscribed to session revocation events');
+        }
+        catch (error) {
+            logger.warn({ error }, 'Failed to subscribe to session revocation events');
+        }
+    }
+    /**
+     * Publish a session revocation event to other instances
+     */
+    async publishRevocation(sessionId, userId, reason, revokedBy) {
+        try {
+            const redis = await this.getRedis();
+            const event = {
+                sessionId,
+                userId,
+                reason,
+                revokedBy,
+                timestamp: Date.now(),
+                sourceInstance: this.instanceId,
+            };
+            await redis.publish(SESSION_REVOCATION_CHANNEL, JSON.stringify(event));
+            logger.debug({ sessionId }, 'Published session revocation event');
+        }
+        catch (error) {
+            logger.warn({ error, sessionId }, 'Failed to publish session revocation event');
+        }
+    }
+    /**
+     * Add a session ID to the local revoked cache
+     */
+    addToRevokedCache(sessionId) {
+        // Evict oldest entries if at capacity
+        if (revokedSessionsCache.size >= MAX_REVOKED_CACHE_SIZE) {
+            const oldestKey = revokedSessionsCache.keys().next().value;
+            if (oldestKey) {
+                revokedSessionsCache.delete(oldestKey);
+            }
+        }
+        revokedSessionsCache.set(sessionId, Date.now() + REVOKED_CACHE_TTL);
+    }
+    /**
+     * Check if a session is in the local revoked cache
+     */
+    isInRevokedCache(sessionId) {
+        const expiresAt = revokedSessionsCache.get(sessionId);
+        if (!expiresAt) {
+            return false;
+        }
+        if (Date.now() > expiresAt) {
+            revokedSessionsCache.delete(sessionId);
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Start cleanup interval for revoked sessions cache
+     */
+    startCacheCleanup() {
+        this.cleanupInterval = setInterval(() => {
+            const now = Date.now();
+            const entries = Array.from(revokedSessionsCache.entries());
+            for (let i = 0; i < entries.length; i++) {
+                const [sessionId, expiresAt] = entries[i];
+                if (now > expiresAt) {
+                    revokedSessionsCache.delete(sessionId);
+                }
+            }
+        }, 60000); // Clean up every minute
+        this.cleanupInterval.unref();
+    }
+    /**
+     * Generate session key for Redis
+     */
+    sessionKey(sessionId) {
+        return `${this.config.keyPrefix}:${sessionId}`;
+    }
+    /**
+     * Generate user sessions index key
+     */
+    userSessionsKey(userId) {
+        return `${this.config.keyPrefix}:user:${userId}`;
+    }
+    /**
+     * Create a new session
+     */
+    async create(input) {
+        const redis = await this.getRedis();
+        const sessionId = crypto.randomUUID();
+        const now = new Date();
+        const ttl = input.ttlSeconds ?? this.config.defaultTTL;
+        const expiresAt = new Date(now.getTime() + ttl * 1000);
+        const session = {
+            id: sessionId,
+            userId: input.userId,
+            tenantId: input.tenantId,
+            ipAddress: input.ipAddress,
+            userAgent: input.userAgent,
+            deviceFingerprint: input.deviceFingerprint,
+            createdAt: now,
+            lastActivityAt: now,
+            expiresAt,
+            revoked: false,
+            metadata: input.metadata,
+        };
+        // Enforce max sessions per user
+        await this.enforceSessionLimit(input.userId);
+        // Store session
+        const key = this.sessionKey(sessionId);
+        await redis.setex(key, ttl, JSON.stringify(this.serializeSession(session)));
+        // Add to user's session index
+        const userKey = this.userSessionsKey(input.userId);
+        await redis.sadd(userKey, sessionId);
+        await redis.expire(userKey, ttl + 3600); // Keep index slightly longer
+        // Security audit log session creation
+        const actor = buildSessionActor(input.userId, input.tenantId, input.ipAddress, input.userAgent, sessionId);
+        await this.securityLogger.logSessionCreated(actor, sessionId, {
+            deviceFingerprint: input.deviceFingerprint,
+            ttlSeconds: ttl,
+        });
+        logger.info({ sessionId, userId: input.userId, tenantId: input.tenantId }, 'Session created');
+        return session;
+    }
+    /**
+     * Get a session by ID
+     */
+    async get(sessionId) {
+        const redis = await this.getRedis();
+        const key = this.sessionKey(sessionId);
+        const data = await redis.get(key);
+        if (!data) {
+            return null;
+        }
+        try {
+            const parsed = JSON.parse(data);
+            const validated = storedSessionSchema.safeParse(parsed);
+            if (!validated.success) {
+                logger.warn({
+                    sessionId,
+                    errors: validated.error.errors,
+                    operation: 'get',
+                }, 'Session data validation failed');
+                return null;
+            }
+            const session = this.deserializeSession(validated.data);
+            // Check if expired (belt and suspenders with Redis TTL)
+            if (session.expiresAt < new Date()) {
+                await this.delete(sessionId);
+                return null;
+            }
+            return session;
+        }
+        catch (error) {
+            logger.error({
+                sessionId,
+                error: error instanceof Error ? error.message : String(error),
+                operation: 'get',
+            }, 'Failed to parse session data');
+            return null;
+        }
+    }
+    /**
+     * Update session activity timestamp
+     */
+    async touch(sessionId) {
+        if (!this.config.trackActivity) {
+            return true;
+        }
+        const session = await this.get(sessionId);
+        if (!session || session.revoked) {
+            return false;
+        }
+        session.lastActivityAt = new Date();
+        const redis = await this.getRedis();
+        const key = this.sessionKey(sessionId);
+        const ttl = await redis.ttl(key);
+        if (ttl > 0) {
+            await redis.setex(key, ttl, JSON.stringify(this.serializeSession(session)));
+        }
+        return true;
+    }
+    /**
+     * Revoke a session and notify other instances immediately
+     */
+    async revoke(sessionId, reason, revokedBy = 'system') {
+        const session = await this.get(sessionId);
+        if (!session) {
+            return false;
+        }
+        session.revoked = true;
+        session.revokedAt = new Date();
+        session.revokedReason = reason;
+        session.revokedBy = revokedBy;
+        const redis = await this.getRedis();
+        const key = this.sessionKey(sessionId);
+        const ttl = await redis.ttl(key);
+        if (ttl > 0) {
+            // Keep the session record briefly so revocation can be detected
+            await redis.setex(key, Math.min(ttl, 300), JSON.stringify(this.serializeSession(session)));
+        }
+        // Add to local cache for immediate validation
+        this.addToRevokedCache(sessionId);
+        // Publish revocation event to other instances
+        await this.publishRevocation(sessionId, session.userId, reason, revokedBy);
+        // Security audit log session revocation
+        const actor = buildSessionActor(revokedBy === 'system' ? session.userId : revokedBy, session.tenantId, session.ipAddress, session.userAgent, sessionId);
+        actor.type = revokedBy === 'system' ? 'system' : 'user';
+        await this.securityLogger.logSessionRevoked(actor, sessionId, reason, {
+            revokedBy,
+            userId: session.userId,
+        });
+        logger.info({ sessionId, userId: session.userId, reason, revokedBy }, 'Session revoked');
+        return true;
+    }
+    /**
+     * Revoke all sessions for a user
+     */
+    async revokeAllForUser(userId, reason, revokedBy = 'system', exceptSessionId) {
+        const sessionIds = await this.getSessionIdsForUser(userId);
+        let revokedCount = 0;
+        for (const sessionId of sessionIds) {
+            if (sessionId === exceptSessionId) {
+                continue;
+            }
+            const revoked = await this.revoke(sessionId, reason, revokedBy);
+            if (revoked) {
+                revokedCount++;
+            }
+        }
+        // Security audit log bulk revocation
+        if (revokedCount > 0) {
+            const actor = {
+                type: revokedBy === 'system' ? 'system' : 'user',
+                id: revokedBy,
+            };
+            await this.securityLogger.logSessionsBulkRevoked(actor, userId, revokedCount, reason);
+        }
+        logger.info({ userId, revokedCount, reason, revokedBy }, 'All user sessions revoked');
+        return revokedCount;
+    }
+    /**
+     * Get all session IDs for a user
+     */
+    async getSessionIdsForUser(userId) {
+        const redis = await this.getRedis();
+        const userKey = this.userSessionsKey(userId);
+        const sessionIds = await redis.smembers(userKey);
+        // Clean up expired sessions from the index
+        const validSessionIds = [];
+        for (const sessionId of sessionIds) {
+            const session = await this.get(sessionId);
+            if (session && !session.revoked) {
+                validSessionIds.push(sessionId);
+            }
+            else {
+                // Remove from index
+                await redis.srem(userKey, sessionId);
+            }
+        }
+        return validSessionIds;
+    }
+    /**
+     * Get all active sessions for a user
+     */
+    async getSessionsForUser(userId) {
+        const sessionIds = await this.getSessionIdsForUser(userId);
+        const sessions = [];
+        for (const sessionId of sessionIds) {
+            const session = await this.get(sessionId);
+            if (session && !session.revoked) {
+                sessions.push(session);
+            }
+        }
+        return sessions;
+    }
+    /**
+     * Delete a session permanently
+     */
+    async delete(sessionId) {
+        const session = await this.get(sessionId);
+        const redis = await this.getRedis();
+        const key = this.sessionKey(sessionId);
+        const deleted = await redis.del(key);
+        if (session) {
+            const userKey = this.userSessionsKey(session.userId);
+            await redis.srem(userKey, sessionId);
+        }
+        return deleted > 0;
+    }
+    /**
+     * Validate a session is active and not revoked
+     *
+     * First checks the local revoked cache for immediate revocation detection,
+     * then validates against Redis for the full session state.
+     */
+    async validate(sessionId) {
+        // Fast path: check local revoked cache first
+        // This catches revocations from other instances immediately
+        if (this.isInRevokedCache(sessionId)) {
+            return { valid: false, reason: 'Session has been revoked' };
+        }
+        const session = await this.get(sessionId);
+        if (!session) {
+            return { valid: false, reason: 'Session not found or expired' };
+        }
+        // Build actor for audit logging
+        const actor = buildSessionActor(session.userId, session.tenantId, session.ipAddress, session.userAgent, sessionId);
+        if (session.revoked) {
+            // Add to local cache for future fast lookups
+            this.addToRevokedCache(sessionId);
+            // Security audit log invalid session validation
+            await this.securityLogger.logSessionValidation(actor, sessionId, false, session.revokedReason ?? 'Session has been revoked');
+            return {
+                valid: false,
+                session,
+                reason: session.revokedReason ?? 'Session has been revoked',
+            };
+        }
+        if (session.expiresAt < new Date()) {
+            // Security audit log expired session validation
+            await this.securityLogger.logSessionValidation(actor, sessionId, false, 'Session has expired');
+            return { valid: false, session, reason: 'Session has expired' };
+        }
+        // Update activity timestamp
+        if (this.config.trackActivity) {
+            await this.touch(sessionId);
+        }
+        return { valid: true, session };
+    }
+    /**
+     * Enforce maximum sessions per user
+     */
+    async enforceSessionLimit(userId) {
+        const sessions = await this.getSessionsForUser(userId);
+        if (sessions.length >= this.config.maxSessionsPerUser) {
+            // Sort by last activity, oldest first
+            sessions.sort((a, b) => a.lastActivityAt.getTime() - b.lastActivityAt.getTime());
+            // Revoke oldest sessions to make room
+            const toRevoke = sessions.slice(0, sessions.length - this.config.maxSessionsPerUser + 1);
+            for (const session of toRevoke) {
+                await this.revoke(session.id, 'Maximum session limit exceeded', 'system');
+            }
+            logger.info({ userId, revokedCount: toRevoke.length, maxSessions: this.config.maxSessionsPerUser }, 'Old sessions revoked due to session limit');
+        }
+    }
+    /**
+     * Serialize session for storage
+     */
+    serializeSession(session) {
+        return {
+            ...session,
+            createdAt: session.createdAt.toISOString(),
+            lastActivityAt: session.lastActivityAt.toISOString(),
+            expiresAt: session.expiresAt.toISOString(),
+            revokedAt: session.revokedAt?.toISOString(),
+        };
+    }
+    /**
+     * Deserialize session from storage
+     */
+    deserializeSession(data) {
+        return {
+            ...data,
+            createdAt: new Date(data['createdAt']),
+            lastActivityAt: new Date(data['lastActivityAt']),
+            expiresAt: new Date(data['expiresAt']),
+            revokedAt: data['revokedAt'] ? new Date(data['revokedAt']) : undefined,
+        };
+    }
+    /**
+     * Stop the session store and cleanup resources
+     */
+    async stop() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+        if (this.subscriber) {
+            await this.subscriber.unsubscribe(SESSION_REVOCATION_CHANNEL);
+            await this.subscriber.quit();
+            this.subscriber = null;
+            this.isSubscribed = false;
+        }
+        logger.info('Session store stopped');
+    }
+    /**
+     * Check if Redis is healthy
+     */
+    async checkHealth() {
+        return checkRedisHealth();
+    }
+    /**
+     * Get store statistics
+     */
+    getStats() {
+        return {
+            revokedCacheSize: revokedSessionsCache.size,
+            instanceId: this.instanceId,
+            isSubscribed: this.isSubscribed,
+        };
+    }
+}
+/**
+ * Singleton session store instance
+ */
+let sessionStore = null;
+/**
+ * Get the session store singleton
+ */
+export function getSessionStore(config) {
+    if (!sessionStore) {
+        sessionStore = new SessionStore(config);
+    }
+    return sessionStore;
+}
+/**
+ * Create a new session store instance (for testing)
+ */
+export function createSessionStore(config, securityLogger) {
+    return new SessionStore(config, securityLogger);
+}
+/**
+ * Reset the session store singleton (for testing)
+ */
+export async function resetSessionStore() {
+    if (sessionStore) {
+        await sessionStore.stop();
+        sessionStore = null;
+    }
+    revokedSessionsCache.clear();
+    logger.info('Session store singleton reset');
+}
+//# sourceMappingURL=session-store.js.map

package/dist/security/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../src/security/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EAEL,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAGrC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;AAE5D,gFAAgF;AAChF,0CAA0C;AAC1C,gFAAgF;AAEhF;;GAEG;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,iBAAiB,CACxB,MAAc,EACd,QAAgB,EAChB,SAAkB,EAClB,SAAkB,EAClB,SAAkB;IAElB,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,MAAM;QACV,QAAQ;QACR,EAAE,EAAE,SAAS;QACb,SAAS;QACT,SAAS;KACV,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;AAE/D,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEvD,6CAA6C;AAC7C,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,sDAAsD;AACtD,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,YAAY;AA+D9C,MAAM,cAAc,GAAuB;IACzC,SAAS,EAAE,gBAAgB;IAC3B,UAAU,EAAE,KAAK,EAAE,WAAW;IAC9B,kBAAkB,EAAE,EAAE;IACtB,aAAa,EAAE,IAAI;CACpB,CAAC;AAoBF;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAqB;IAC3B,KAAK,GAAiB,IAAI,CAAC;IAC3B,UAAU,GAAiB,IAAI,CAAC;IACvB,UAAU,CAAS;IAC5B,YAAY,GAAY,KAAK,CAAC;IAC9B,eAAe,GAA0B,IAAI,CAAC;IAC9C,cAAc,CAAsB;IAE5C,YAAY,SAAsC,EAAE,EAAE,cAAoC;QACxF,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,cAAc,IAAI,sBAAsB,EAAE,CAAC;QAEjE,oDAAoD;QACpD,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;YAExB,iCAAiC;YACjC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,+CAA+C;YAC/C,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC;YAEzC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YAE5D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;gBACjD,IAAI,OAAO,KAAK,0BAA0B,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBACnC,MAAM,SAAS,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;wBAEjE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;4BACvB,MAAM,CAAC,IAAI,CACT;gCACE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;gCAC9B,SAAS,EAAE,wBAAwB;6BACpC,EACD,4CAA4C,CAC7C,CAAC;4BACF,OAAO;wBACT,CAAC;wBAED,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC;wBAE7B,+BAA+B;wBAC/B,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;4BAC7C,OAAO;wBACT,CAAC;wBAED,iDAAiD;wBACjD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;wBAExC,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACpD,yDAAyD,CAC1D,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CACV;4BACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;4BAC7D,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;4BACrC,SAAS,EAAE,wBAAwB;yBACpC,EACD,0CAA0C,CAC3C,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,kDAAkD,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,SAAiB,EACjB,MAAc,EACd,MAAc,EACd,SAAiB;QAEjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,KAAK,GAA2B;gBACpC,SAAS;gBACT,MAAM;gBACN,MAAM;gBACN,SAAS;gBACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,cAAc,EAAE,IAAI,CAAC,UAAU;aAChC,CAAC;YAEF,MAAM,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,4CAA4C,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,SAAiB;QACzC,sCAAsC;QACtC,IAAI,oBAAoB,CAAC,IAAI,IAAI,sBAAsB,EAAE,CAAC;YACxD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC3D,IAAI,SAAS,EAAE,CAAC;gBACd,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,SAAiB;QACxC,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YAC3B,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1C,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;oBACpB,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,wBAAwB;QAEnC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,SAAiB;QAClC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,MAAc;QACpC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,SAAS,MAAM,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAyB;QACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAY;YACvB,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,GAAG;YACnB,SAAS;YACT,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QAEF,gCAAgC;QAChC,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE7C,gBAAgB;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5E,8BAA8B;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,6BAA6B;QAEtE,sCAAsC;QACtC,MAAM,KAAK,GAAG,iBAAiB,CAC7B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,EACf,SAAS,CACV,CAAC;QACF,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE;YAC5D,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAC7D,iBAAiB,CAClB,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAExD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CACT;oBACE,SAAS;oBACT,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;oBAC9B,SAAS,EAAE,KAAK;iBACjB,EACD,gCAAgC,CACjC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAA+B,CAAC,CAAC;YAEnF,wDAAwD;YACxD,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV;gBACE,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,SAAS,EAAE,KAAK;aACjB,EACD,8BAA8B,CAC/B,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,MAAc,EACd,YAAoB,QAAQ;QAE5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC;QAC/B,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,gEAAgE;YAChE,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;QAED,8CAA8C;QAC9C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAElC,8CAA8C;QAC9C,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAE3E,wCAAwC;QACxC,MAAM,KAAK,GAAG,iBAAiB,CAC7B,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EACnD,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,EACjB,SAAS,CACV,CAAC;QACF,KAAK,CAAC,IAAI,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE;YACpE,SAAS;YACT,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EACxD,iBAAiB,CAClB,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,MAAc,EACd,YAAoB,QAAQ,EAC5B,eAAwB;QAExB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAChE,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAkB;gBAC3B,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;gBAChD,EAAE,EAAE,SAAS;aACd,CAAC;YACF,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,EAC3C,2BAA2B,CAC5B,CAAC;QAEF,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEjD,2CAA2C;QAC3C,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,oBAAoB;gBACpB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,OAAO,GAAG,CAAC,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB;QAK9B,6CAA6C;QAC7C,4DAA4D;QAC5D,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAClE,CAAC;QAED,gCAAgC;QAChC,MAAM,KAAK,GAAG,iBAAiB,CAC7B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,EACjB,SAAS,CACV,CAAC;QAEF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,6CAA6C;YAC7C,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAElC,gDAAgD;YAChD,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC5C,KAAK,EACL,SAAS,EACT,KAAK,EACL,OAAO,CAAC,aAAa,IAAI,0BAA0B,CACpD,CAAC;YAEF,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,MAAM,EAAE,OAAO,CAAC,aAAa,IAAI,0BAA0B;aAC5D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACnC,gDAAgD;YAChD,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC5C,KAAK,EACL,SAAS,EACT,KAAK,EACL,qBAAqB,CACtB,CAAC;YAEF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAClE,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACtD,sCAAsC;YACtC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjF,sCAAsC;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC;YACzF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,MAAM,CACf,OAAO,CAAC,EAAE,EACV,gCAAgC,EAChC,QAAQ,CACT,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EACtF,2CAA2C,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAgB;QACvC,OAAO;YACL,GAAG,OAAO;YACV,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;YAC1C,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE;YACpD,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;YAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,IAA6B;QACtD,OAAO;YACL,GAAG,IAAI;YACP,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAW,CAAC;YAChD,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAW,CAAC;YAC1D,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAW,CAAC;YAChD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAW,CAAC,CAAC,CAAC,CAAC,SAAS;SACtE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;YAC9D,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QAKf,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,QAAQ;QAKN,OAAO;YACL,gBAAgB,EAAE,oBAAoB,CAAC,IAAI;YAC3C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,IAAI,YAAY,GAAwB,IAAI,CAAC;AAE7C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoC;IAClE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAoC,EACpC,cAAoC;IAEpC,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1B,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,oBAAoB,CAAC,KAAK,EAAE,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;AAC/C,CAAC"}