@vorionsys/security 1.0.0

package/dist/auth/sso/oidc-provider.js

@@ -0,0 +1,589 @@
+/**
+ * OIDC Provider Implementation for Vorion Platform
+ *
+ * Handles OIDC authentication flows using dynamic imports for ESM-only openid-client v6.
+ * Supports PKCE-enhanced authorization code flow with token management.
+ *
+ * @module auth/sso/oidc-provider
+ */
+import { randomBytes, createHash } from 'node:crypto';
+import { createLogger } from '../../common/logger.js';
+const logger = createLogger({ component: 'oidc-provider' });
+/**
+ * Cached openid-client module
+ */
+let oidcClientModule = null;
+/**
+ * Dynamically imports openid-client (ESM-only module).
+ * This allows our CommonJS codebase to use openid-client v6.
+ */
+async function getOIDCClient() {
+    if (oidcClientModule) {
+        return oidcClientModule;
+    }
+    logger.debug('Loading openid-client module via dynamic import');
+    oidcClientModule = await import('openid-client');
+    return oidcClientModule;
+}
+// OIDCConfiguration type defined above in the OIDCClientModule interface section
+// =============================================================================
+// OIDC Provider Error
+// =============================================================================
+/**
+ * OIDC-specific error class
+ */
+export class OIDCError extends Error {
+    code;
+    providerId;
+    originalError;
+    details;
+    constructor(message, code, options) {
+        super(message);
+        this.name = 'OIDCError';
+        this.code = code;
+        this.providerId = options?.providerId;
+        this.originalError = options?.originalError;
+        this.details = options?.details;
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+    }
+}
+/**
+ * Cache for OIDC discovery results
+ */
+const discoveryCache = new Map();
+// =============================================================================
+// OIDC Provider Class
+// =============================================================================
+/**
+ * OIDC Provider - handles authentication flows for a single provider
+ *
+ * Uses dynamic imports to work with ESM-only openid-client v6 in a CommonJS environment.
+ *
+ * @example
+ * ```typescript
+ * const provider = new OIDCProvider(config);
+ * await provider.initialize();
+ *
+ * // Generate authorization URL
+ * const { url, state } = await provider.generateAuthorizationUrl({
+ *   returnUrl: '/dashboard'
+ * });
+ *
+ * // After callback, exchange code for tokens
+ * const result = await provider.exchangeCode({
+ *   code: callbackCode,
+ *   state: callbackState,
+ *   storedState: savedState
+ * });
+ * ```
+ */
+export class OIDCProvider {
+    config;
+    discoveredConfig = null;
+    initialized = false;
+    initializePromise = null;
+    constructor(config) {
+        this.config = config;
+        logger.debug('OIDCProvider created', {
+            providerId: config.id,
+            type: config.type,
+            issuer: config.issuer,
+        });
+    }
+    /**
+     * Get the provider configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+    /**
+     * Get the provider ID
+     */
+    get id() {
+        return this.config.id;
+    }
+    /**
+     * Check if the provider is enabled
+     */
+    get enabled() {
+        return this.config.enabled;
+    }
+    /**
+     * Initialize the provider by performing OIDC discovery
+     */
+    async initialize(cacheTtlSeconds = 3600) {
+        // Check if already initialized and cache is valid
+        if (this.initialized && this.discoveredConfig) {
+            const cacheAge = (Date.now() - this.discoveredConfig.cachedAt) / 1000;
+            if (cacheAge < cacheTtlSeconds) {
+                return;
+            }
+        }
+        // Deduplicate concurrent initialization calls
+        if (this.initializePromise) {
+            return this.initializePromise;
+        }
+        this.initializePromise = this.performDiscovery(cacheTtlSeconds);
+        try {
+            await this.initializePromise;
+        }
+        finally {
+            this.initializePromise = null;
+        }
+    }
+    /**
+     * Perform OIDC discovery
+     */
+    async performDiscovery(cacheTtlSeconds) {
+        const cacheKey = `${this.config.issuer}:${this.config.clientId}`;
+        // Check global cache first
+        const cached = discoveryCache.get(cacheKey);
+        if (cached) {
+            const cacheAge = (Date.now() - cached.cachedAt) / 1000;
+            if (cacheAge < cacheTtlSeconds) {
+                this.discoveredConfig = cached;
+                this.initialized = true;
+                logger.debug('Using cached OIDC discovery', {
+                    providerId: this.config.id,
+                    issuer: this.config.issuer,
+                });
+                return;
+            }
+        }
+        logger.info('Performing OIDC discovery', {
+            providerId: this.config.id,
+            issuer: this.config.issuer,
+        });
+        try {
+            const client = await getOIDCClient();
+            // Construct issuer URL
+            const issuerUrl = new URL(this.config.issuer);
+            // Choose client authentication method based on whether we have a secret
+            let clientAuth;
+            if (this.config.clientSecret) {
+                clientAuth = client.ClientSecretPost(this.config.clientSecret);
+            }
+            else {
+                clientAuth = client.None();
+            }
+            // Perform discovery
+            const config = await client.discovery(issuerUrl, this.config.clientId, undefined, // client metadata
+            clientAuth);
+            this.discoveredConfig = {
+                config,
+                cachedAt: Date.now(),
+            };
+            // Update global cache
+            discoveryCache.set(cacheKey, this.discoveredConfig);
+            this.initialized = true;
+            logger.info('OIDC discovery completed', {
+                providerId: this.config.id,
+                issuer: this.config.issuer,
+                authorizationEndpoint: config.serverMetadata().authorization_endpoint,
+                tokenEndpoint: config.serverMetadata().token_endpoint,
+            });
+        }
+        catch (error) {
+            logger.error('OIDC discovery failed', {
+                providerId: this.config.id,
+                issuer: this.config.issuer,
+                error,
+            });
+            throw new OIDCError(`Failed to discover OIDC configuration for ${this.config.issuer}`, 'SSO_DISCOVERY_FAILED', {
+                providerId: this.config.id,
+                originalError: error instanceof Error ? error : undefined,
+                details: { issuer: this.config.issuer },
+            });
+        }
+    }
+    /**
+     * Ensure provider is initialized before operations
+     */
+    ensureInitialized() {
+        if (!this.initialized || !this.discoveredConfig) {
+            throw new OIDCError('Provider not initialized. Call initialize() first.', 'SSO_CONFIGURATION_ERROR', { providerId: this.config.id });
+        }
+    }
+    /**
+     * Generate PKCE code verifier and challenge
+     */
+    generatePKCE() {
+        // Generate a random 32-byte code verifier (43 characters in base64url)
+        const codeVerifier = randomBytes(32)
+            .toString('base64url')
+            .replace(/[^a-zA-Z0-9\-_]/g, '')
+            .slice(0, 43);
+        // Generate SHA-256 hash for code challenge
+        const codeChallenge = createHash('sha256')
+            .update(codeVerifier)
+            .digest('base64url');
+        return { codeVerifier, codeChallenge };
+    }
+    /**
+     * Generate a random state parameter
+     */
+    generateState() {
+        return randomBytes(32).toString('base64url');
+    }
+    /**
+     * Generate a random nonce
+     */
+    generateNonce() {
+        return randomBytes(32).toString('base64url');
+    }
+    /**
+     * Generate authorization URL for initiating login
+     */
+    async generateAuthorizationUrl(options) {
+        this.ensureInitialized();
+        const client = await getOIDCClient();
+        const config = this.discoveredConfig.config;
+        const state = this.generateState();
+        const nonce = this.generateNonce();
+        // Build authorization parameters
+        const params = {
+            redirect_uri: this.config.redirectUri,
+            scope: this.config.scopes.join(' '),
+            response_type: this.config.responseType || 'code',
+            state,
+            nonce,
+        };
+        // Add PKCE if enabled
+        let codeVerifier;
+        if (this.config.pkceEnabled) {
+            const pkce = this.generatePKCE();
+            codeVerifier = pkce.codeVerifier;
+            params.code_challenge = pkce.codeChallenge;
+            params.code_challenge_method = 'S256';
+        }
+        // Add offline_access scope if refresh tokens are requested
+        if (this.config.requestRefreshToken && !params.scope.includes('offline_access')) {
+            params.scope = `${params.scope} offline_access`;
+        }
+        // Add additional auth params from config
+        if (this.config.additionalAuthParams) {
+            Object.assign(params, this.config.additionalAuthParams);
+        }
+        // Build authorization URL using openid-client v6 API
+        const url = client.buildAuthorizationUrl(config, params);
+        // Create authorization state for storage
+        const expirationSeconds = options?.stateExpirationSeconds ?? 600;
+        const now = new Date();
+        const authState = {
+            state,
+            nonce,
+            codeVerifier,
+            providerId: this.config.id,
+            returnUrl: options?.returnUrl,
+            tenantId: options?.tenantId,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + expirationSeconds * 1000),
+            metadata: options?.metadata,
+        };
+        logger.debug('Generated authorization URL', {
+            providerId: this.config.id,
+            pkceEnabled: this.config.pkceEnabled,
+            scopes: params.scope,
+        });
+        return {
+            url: url.toString(),
+            state: authState,
+        };
+    }
+    /**
+     * Exchange authorization code for tokens
+     */
+    async exchangeCode(request) {
+        this.ensureInitialized();
+        const { code, state, storedState } = request;
+        // Validate state
+        if (state !== storedState.state) {
+            throw new OIDCError('State parameter mismatch', 'SSO_STATE_INVALID', {
+                providerId: this.config.id,
+                details: { expected: storedState.state.substring(0, 8), received: state.substring(0, 8) },
+            });
+        }
+        // Check state expiration
+        if (new Date() > storedState.expiresAt) {
+            throw new OIDCError('Authorization state has expired', 'SSO_STATE_EXPIRED', {
+                providerId: this.config.id,
+                details: { expiresAt: storedState.expiresAt.toISOString() },
+            });
+        }
+        const client = await getOIDCClient();
+        const config = this.discoveredConfig.config;
+        try {
+            logger.debug('Exchanging authorization code', {
+                providerId: this.config.id,
+                hasPKCE: !!storedState.codeVerifier,
+            });
+            // Build the callback URL with the authorization response
+            const callbackUrl = new URL(this.config.redirectUri);
+            callbackUrl.searchParams.set('code', code);
+            callbackUrl.searchParams.set('state', state);
+            // Prepare checks for token validation
+            const checks = {
+                expectedState: state,
+                expectedNonce: storedState.nonce,
+                pkceCodeVerifier: storedState.codeVerifier,
+            };
+            // Perform token exchange using openid-client v6 API
+            const tokenResponse = await client.authorizationCodeGrant(config, callbackUrl, checks);
+            // Extract tokens
+            const tokens = this.extractTokenSet(tokenResponse);
+            // Parse ID token claims
+            const claims = this.parseIdToken(tokens.idToken);
+            logger.info('Token exchange successful', {
+                providerId: this.config.id,
+                sub: claims.sub,
+                hasRefreshToken: !!tokens.refreshToken,
+            });
+            return {
+                tokens,
+                claims,
+                tenantId: storedState.tenantId,
+            };
+        }
+        catch (error) {
+            logger.error('Token exchange failed', {
+                providerId: this.config.id,
+                error,
+            });
+            if (error instanceof OIDCError) {
+                throw error;
+            }
+            throw new OIDCError('Failed to exchange authorization code for tokens', 'SSO_TOKEN_EXCHANGE_FAILED', {
+                providerId: this.config.id,
+                originalError: error instanceof Error ? error : undefined,
+            });
+        }
+    }
+    /**
+     * Refresh access token using refresh token
+     */
+    async refreshTokens(refreshToken) {
+        this.ensureInitialized();
+        const client = await getOIDCClient();
+        const config = this.discoveredConfig.config;
+        try {
+            logger.debug('Refreshing tokens', { providerId: this.config.id });
+            const tokenResponse = await client.refreshTokenGrant(config, refreshToken);
+            const tokens = this.extractTokenSet(tokenResponse);
+            // Parse new ID token if present
+            let claims;
+            if (tokens.idToken) {
+                claims = this.parseIdToken(tokens.idToken);
+            }
+            logger.info('Token refresh successful', {
+                providerId: this.config.id,
+                hasNewIdToken: !!tokens.idToken,
+            });
+            return { tokens, claims };
+        }
+        catch (error) {
+            logger.error('Token refresh failed', {
+                providerId: this.config.id,
+                error,
+            });
+            throw new OIDCError('Failed to refresh tokens', 'SSO_TOKEN_REFRESH_FAILED', {
+                providerId: this.config.id,
+                originalError: error instanceof Error ? error : undefined,
+            });
+        }
+    }
+    /**
+     * Revoke a token (access or refresh)
+     */
+    async revokeToken(token, tokenTypeHint) {
+        this.ensureInitialized();
+        const config = this.discoveredConfig.config;
+        const revocationEndpoint = config.serverMetadata().revocation_endpoint;
+        if (!revocationEndpoint) {
+            logger.warn('Token revocation not supported by provider', {
+                providerId: this.config.id,
+            });
+            return;
+        }
+        try {
+            const client = await getOIDCClient();
+            logger.debug('Revoking token', {
+                providerId: this.config.id,
+                tokenTypeHint,
+            });
+            const params = {};
+            if (tokenTypeHint) {
+                params.token_type_hint = tokenTypeHint;
+            }
+            await client.tokenRevocation(config, token, params);
+            logger.info('Token revoked successfully', {
+                providerId: this.config.id,
+                tokenTypeHint,
+            });
+        }
+        catch (error) {
+            logger.error('Token revocation failed', {
+                providerId: this.config.id,
+                error,
+            });
+            throw new OIDCError('Failed to revoke token', 'SSO_TOKEN_REVOCATION_FAILED', {
+                providerId: this.config.id,
+                originalError: error instanceof Error ? error : undefined,
+            });
+        }
+    }
+    /**
+     * Fetch user info from the userinfo endpoint
+     */
+    async fetchUserInfo(accessToken, expectedSubject) {
+        this.ensureInitialized();
+        const config = this.discoveredConfig.config;
+        const userinfoEndpoint = config.serverMetadata().userinfo_endpoint;
+        if (!userinfoEndpoint) {
+            throw new OIDCError('UserInfo endpoint not available', 'SSO_CONFIGURATION_ERROR', { providerId: this.config.id });
+        }
+        try {
+            const client = await getOIDCClient();
+            logger.debug('Fetching user info', { providerId: this.config.id });
+            // Use skipSubjectCheck if no expected subject is provided
+            const subjectCheck = expectedSubject ?? client.skipSubjectCheck;
+            const userInfo = await client.fetchUserInfo(config, accessToken, subjectCheck);
+            logger.debug('User info fetched', {
+                providerId: this.config.id,
+                sub: userInfo.sub,
+            });
+            return userInfo;
+        }
+        catch (error) {
+            logger.error('Failed to fetch user info', {
+                providerId: this.config.id,
+                error,
+            });
+            throw new OIDCError('Failed to fetch user info', 'SSO_USERINFO_FAILED', {
+                providerId: this.config.id,
+                originalError: error instanceof Error ? error : undefined,
+            });
+        }
+    }
+    /**
+     * Generate logout URL for RP-initiated logout
+     */
+    generateLogoutUrl(options) {
+        this.ensureInitialized();
+        // Use custom logout URL if configured
+        if (this.config.logoutUrl) {
+            return this.config.logoutUrl;
+        }
+        const config = this.discoveredConfig.config;
+        const endSessionEndpoint = config.serverMetadata().end_session_endpoint;
+        if (!endSessionEndpoint) {
+            logger.debug('End session endpoint not available', {
+                providerId: this.config.id,
+            });
+            return null;
+        }
+        // Build logout URL parameters
+        const params = {};
+        if (options?.idToken) {
+            params.id_token_hint = options.idToken;
+        }
+        if (options?.postLogoutRedirectUri) {
+            params.post_logout_redirect_uri = options.postLogoutRedirectUri;
+        }
+        if (options?.state) {
+            params.state = options.state;
+        }
+        // Build URL using the end_session_endpoint
+        const url = new URL(endSessionEndpoint);
+        for (const [key, value] of Object.entries(params)) {
+            url.searchParams.set(key, value);
+        }
+        return url.toString();
+    }
+    /**
+     * Extract token set from openid-client response
+     */
+    extractTokenSet(tokenResponse) {
+        const accessToken = tokenResponse.access_token;
+        if (!accessToken) {
+            throw new OIDCError('No access token in response', 'SSO_TOKEN_EXCHANGE_FAILED', { providerId: this.config.id });
+        }
+        let expiresAt;
+        if (tokenResponse.expires_in) {
+            expiresAt = new Date(Date.now() + tokenResponse.expires_in * 1000);
+        }
+        return {
+            accessToken,
+            tokenType: tokenResponse.token_type || 'Bearer',
+            expiresAt,
+            idToken: tokenResponse.id_token,
+            refreshToken: tokenResponse.refresh_token,
+            scope: tokenResponse.scope,
+        };
+    }
+    /**
+     * Parse ID token claims (basic decode without cryptographic verification)
+     * Note: openid-client v6 validates the ID token during authorizationCodeGrant
+     */
+    parseIdToken(idToken) {
+        if (!idToken) {
+            throw new OIDCError('No ID token in response', 'SSO_TOKEN_VALIDATION_FAILED', { providerId: this.config.id });
+        }
+        try {
+            // ID token is already validated by openid-client during token exchange
+            // We just need to decode the payload
+            const parts = idToken.split('.');
+            if (parts.length !== 3) {
+                throw new Error('Invalid JWT format');
+            }
+            const payloadB64 = parts[1];
+            const payload = JSON.parse(Buffer.from(payloadB64, 'base64url').toString('utf8'));
+            // Validate required claims
+            if (!payload.sub) {
+                throw new OIDCError('ID token missing required "sub" claim', 'SSO_TOKEN_VALIDATION_FAILED', { providerId: this.config.id });
+            }
+            return payload;
+        }
+        catch (error) {
+            if (error instanceof OIDCError) {
+                throw error;
+            }
+            throw new OIDCError('Failed to parse ID token', 'SSO_TOKEN_VALIDATION_FAILED', {
+                providerId: this.config.id,
+                originalError: error instanceof Error ? error : undefined,
+            });
+        }
+    }
+    /**
+     * Clear discovery cache for this provider
+     */
+    clearCache() {
+        const cacheKey = `${this.config.issuer}:${this.config.clientId}`;
+        discoveryCache.delete(cacheKey);
+        this.discoveredConfig = null;
+        this.initialized = false;
+        logger.debug('Cleared OIDC discovery cache', {
+            providerId: this.config.id,
+        });
+    }
+}
+// =============================================================================
+// Factory Function
+// =============================================================================
+/**
+ * Create and initialize an OIDC provider
+ */
+export async function createOIDCProvider(config, options) {
+    const provider = new OIDCProvider(config);
+    await provider.initialize(options?.cacheTtlSeconds);
+    return provider;
+}
+/**
+ * Clear all discovery caches
+ */
+export function clearAllDiscoveryCaches() {
+    discoveryCache.clear();
+    logger.info('Cleared all OIDC discovery caches');
+}
+//# sourceMappingURL=oidc-provider.js.map

package/dist/auth/sso/oidc-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-provider.js","sourceRoot":"","sources":["../../../src/auth/sso/oidc-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AActD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;AA6D5D;;GAEG;AACH,IAAI,gBAAgB,GAA4B,IAAI,CAAC;AAErD;;;GAGG;AACH,KAAK,UAAU,aAAa;IAC1B,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChE,gBAAgB,GAAG,MAAM,MAAM,CAAC,eAAe,CAAgC,CAAC;IAChF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,iFAAiF;AAEjF,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,IAAI,CAAe;IACnB,UAAU,CAAU;IACpB,aAAa,CAAS;IACtB,OAAO,CAA2B;IAElC,YACE,OAAe,EACf,IAAkB,EAClB,OAIC;QAED,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;QAEhC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF;AAWD;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE3D,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,YAAY;IACN,MAAM,CAAqB;IACpC,gBAAgB,GAA4B,IAAI,CAAC;IACjD,WAAW,GAAG,KAAK,CAAC;IACpB,iBAAiB,GAAyB,IAAI,CAAC;IAEvD,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,EAAE;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI;QACrC,kDAAkD;QAClD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YACtE,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,iBAAiB,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAAC,eAAuB;QACpD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAEjE,2BAA2B;QAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YACvD,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;gBAC/B,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;gBAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;oBAC1C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;oBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;iBAC3B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YACvC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YAErC,uBAAuB;YACvB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAE9C,wEAAwE;YACxE,IAAI,UAAuF,CAAC;YAC5F,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;YAED,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CACnC,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,CACX,CAAC;YAEF,IAAI,CAAC,gBAAgB,GAAG;gBACtB,MAAM;gBACN,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC;YAEF,sBAAsB;YACtB,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAExB,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,qBAAqB,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,sBAAsB;gBACrE,aAAa,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,cAAc;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,KAAK;aACN,CAAC,CAAC;YAEH,MAAM,IAAI,SAAS,CACjB,6CAA6C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EACjE,sBAAsB,EACtB;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBACzD,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;aACxC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,IAAI,SAAS,CACjB,oDAAoD,EACpD,yBAAyB,EACzB,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,uEAAuE;QACvE,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC;aACjC,QAAQ,CAAC,WAAW,CAAC;aACrB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;aAC/B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,2CAA2C;QAC3C,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC;aACvC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAAC,OAK9B;QACC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAiB,CAAC,MAAM,CAAC;QAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,iCAAiC;QACjC,MAAM,MAAM,GAA2B;YACrC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACnC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM;YACjD,KAAK;YACL,KAAK;SACN,CAAC;QAEF,sBAAsB;QACtB,IAAI,YAAgC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YACjC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC;YAC3C,MAAM,CAAC,qBAAqB,GAAG,MAAM,CAAC;QACxC,CAAC;QAED,2DAA2D;QAC3D,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,KAAK,GAAG,GAAG,MAAM,CAAC,KAAK,iBAAiB,CAAC;QAClD,CAAC;QAED,yCAAyC;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC1D,CAAC;QAED,qDAAqD;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEzD,yCAAyC;QACzC,MAAM,iBAAiB,GAAG,OAAO,EAAE,sBAAsB,IAAI,GAAG,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAuB;YACpC,KAAK;YACL,KAAK;YACL,YAAY;YACZ,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAC1B,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,GAAG,IAAI,CAAC;YAC7D,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC5B,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC1C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAC1B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,MAAM,EAAE,MAAM,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAA6B;QAC9C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QAE7C,iBAAiB;QACjB,IAAI,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CACjB,0BAA0B,EAC1B,mBAAmB,EACnB;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;aAC1F,CACF,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,IAAI,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,SAAS,CACjB,iCAAiC,EACjC,mBAAmB,EACnB;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE;aAC5D,CACF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAiB,CAAC,MAAM,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBAC5C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,YAAY;aACpC,CAAC,CAAC;YAEH,yDAAyD;YACzD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACrD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3C,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAE7C,sCAAsC;YACtC,MAAM,MAAM,GAAwD;gBAClE,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,WAAW,CAAC,KAAK;gBAChC,gBAAgB,EAAE,WAAW,CAAC,YAAY;aAC3C,CAAC;YAEF,oDAAoD;YACpD,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,sBAAsB,CACvD,MAAM,EACN,WAAW,EACX,MAAM,CACP,CAAC;YAEF,iBAAiB;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YAEnD,wBAAwB;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEjD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBACvC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;aACvC,CAAC,CAAC;YAEH,OAAO;gBACL,MAAM;gBACN,MAAM;gBACN,QAAQ,EAAE,WAAW,CAAC,QAAQ;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,KAAK;aACN,CAAC,CAAC;YAEH,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,SAAS,CACjB,kDAAkD,EAClD,2BAA2B,EAC3B;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aAC1D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,YAAoB;QACtC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAiB,CAAC,MAAM,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAElE,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAE3E,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YAEnD,gCAAgC;YAChC,IAAI,MAAiC,CAAC;YACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;aAChC,CAAC,CAAC;YAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACnC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,KAAK;aACN,CAAC,CAAC;YAEH,MAAM,IAAI,SAAS,CACjB,0BAA0B,EAC1B,0BAA0B,EAC1B;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aAC1D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,aAAgD;QAC/E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAiB,CAAC,MAAM,CAAC;QAC7C,MAAM,kBAAkB,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,mBAAmB,CAAC;QAEvE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACxD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;aAC3B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YAErC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;gBAC7B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,CAAC,eAAe,GAAG,aAAa,CAAC;YACzC,CAAC;YAED,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAEpD,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBACxC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,KAAK;aACN,CAAC,CAAC;YAEH,MAAM,IAAI,SAAS,CACjB,wBAAwB,EACxB,6BAA6B,EAC7B;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aAC1D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,eAAwB;QAC/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAiB,CAAC,MAAM,CAAC;QAC7C,MAAM,gBAAgB,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,iBAAiB,CAAC;QAEnE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CACjB,iCAAiC,EACjC,yBAAyB,EACzB,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;YAErC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAEnE,0DAA0D;YAC1D,MAAM,YAAY,GAAG,eAAe,IAAI,MAAM,CAAC,gBAAgB,CAAC;YAChE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YAE/E,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBAChC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAC;YAEH,OAAO,QAAwB,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACxC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,KAAK;aACN,CAAC,CAAC;YAEH,MAAM,IAAI,SAAS,CACjB,2BAA2B,EAC3B,qBAAqB,EACrB;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aAC1D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,OAIjB;QACC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,sCAAsC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAC/B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAiB,CAAC,MAAM,CAAC;QAC7C,MAAM,kBAAkB,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,oBAAoB,CAAC;QAExE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;aAC3B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QACzC,CAAC;QAED,IAAI,OAAO,EAAE,qBAAqB,EAAE,CAAC;YACnC,MAAM,CAAC,wBAAwB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAClE,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,CAAC;QAED,2CAA2C;QAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,aAA4B;QAClD,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CACjB,6BAA6B,EAC7B,2BAA2B,EAC3B,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,SAA2B,CAAC;QAChC,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;YAC7B,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACrE,CAAC;QAED,OAAO;YACL,WAAW;YACX,SAAS,EAAE,aAAa,CAAC,UAAU,IAAI,QAAQ;YAC/C,SAAS;YACT,OAAO,EAAE,aAAa,CAAC,QAAQ;YAC/B,YAAY,EAAE,aAAa,CAAC,aAAa;YACzC,KAAK,EAAE,aAAa,CAAC,KAAK;SAC3B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,OAAgB;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,yBAAyB,EACzB,6BAA6B,EAC7B,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,uEAAuE;YACvE,qCAAqC;YACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACtD,CAAC;YAEF,2BAA2B;YAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,IAAI,SAAS,CACjB,uCAAuC,EACvC,6BAA6B,EAC7B,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC/B,CAAC;YACJ,CAAC;YAED,OAAO,OAAwB,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,SAAS,CACjB,0BAA0B,EAC1B,6BAA6B,EAC7B;gBACE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC1B,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aAC1D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACjE,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;YAC3C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;CACF;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA0B,EAC1B,OAAsC;IAEtC,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,cAAc,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;AACnD,CAAC"}