@waiaas/daemon 2.0.0-rc.1

package/dist/infrastructure/database/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/database/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAqCH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCnB,CAAC;AAMF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBpB,CAAC;AAMF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0DxB,CAAC;AAMF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyBpB,CAAC;AAMF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB5B,CAAC;AAMF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBpB,CAAC;AAMF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIxB,CAAC;AAMH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB5B,CAAC;AAMF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBzB,CAAC;AAMF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYpB,CAAC;AAMF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlB,CAAC;AAMH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAazB,CAAC;AAMF,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBtB,CAAC;AAMF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGlB,CAAC"}

package/dist/infrastructure/database/schema.js

@@ -0,0 +1,288 @@
+/**
+ * Drizzle ORM schema definitions for WAIaaS daemon SQLite database.
+ *
+ * 14 tables: wallets, sessions, transactions, policies, pending_approvals, audit_log, key_value_store, notification_logs, token_registry, settings, api_keys, telegram_users, wc_sessions, wc_store
+ *
+ * CHECK constraints are derived from @waiaas/core enum SSoT arrays (not hardcoded strings).
+ * All timestamps are Unix epoch seconds via { mode: 'timestamp' }.
+ * All text PKs use UUID v7 for ms-precision time ordering (except audit_log which uses AUTOINCREMENT).
+ *
+ * v1.4.2: agents table renamed to wallets, agent_id columns renamed to wallet_id.
+ * WALLET_STATUSES used for status CHECK constraint.
+ *
+ * v1.4.6: Environment model -- wallets.network replaced by wallets.environment + wallets.defaultNetwork.
+ * transactions.network and policies.network columns added.
+ *
+ * @see docs/25-sqlite-schema.md
+ */
+import { sqliteTable, text, integer, real, index, uniqueIndex, check, } from 'drizzle-orm/sqlite-core';
+import { sql } from 'drizzle-orm';
+import { WALLET_STATUSES, CHAIN_TYPES, NETWORK_TYPES, ENVIRONMENT_TYPES, TRANSACTION_STATUSES, TRANSACTION_TYPES, POLICY_TYPES, POLICY_TIERS, NOTIFICATION_LOG_STATUSES, } from '@waiaas/core';
+// ---------------------------------------------------------------------------
+// Utility: build CHECK constraint SQL from SSoT enum arrays
+// ---------------------------------------------------------------------------
+const buildCheckSql = (column, values) => sql.raw(`${column} IN (${values.map((v) => `'${v}'`).join(', ')})`);
+// ---------------------------------------------------------------------------
+// Table 1: wallets -- wallet identity and lifecycle state (renamed from agents in v3)
+// v1.4.6: network replaced by environment + defaultNetwork (environment model)
+// ---------------------------------------------------------------------------
+export const wallets = sqliteTable('wallets', {
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+    chain: text('chain').notNull(),
+    environment: text('environment').notNull(),
+    defaultNetwork: text('default_network'),
+    publicKey: text('public_key').notNull(),
+    status: text('status').notNull().default('CREATING'),
+    ownerAddress: text('owner_address'),
+    ownerVerified: integer('owner_verified', { mode: 'boolean' }).notNull().default(false),
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+    updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull(),
+    suspendedAt: integer('suspended_at', { mode: 'timestamp' }),
+    suspensionReason: text('suspension_reason'),
+}, (table) => [
+    uniqueIndex('idx_wallets_public_key').on(table.publicKey),
+    index('idx_wallets_status').on(table.status),
+    index('idx_wallets_chain_environment').on(table.chain, table.environment),
+    index('idx_wallets_owner_address').on(table.ownerAddress),
+    check('check_chain', buildCheckSql('chain', CHAIN_TYPES)),
+    check('check_environment', buildCheckSql('environment', ENVIRONMENT_TYPES)),
+    check('check_default_network', sql.raw(`default_network IS NULL OR default_network IN (${NETWORK_TYPES.map((v) => `'${v}'`).join(', ')})`)),
+    check('check_status', buildCheckSql('status', WALLET_STATUSES)),
+    check('check_owner_verified', sql `owner_verified IN (0, 1)`),
+]);
+// ---------------------------------------------------------------------------
+// Table 2: sessions -- JWT session tracking
+// ---------------------------------------------------------------------------
+export const sessions = sqliteTable('sessions', {
+    id: text('id').primaryKey(),
+    walletId: text('wallet_id')
+        .notNull()
+        .references(() => wallets.id, { onDelete: 'cascade' }),
+    tokenHash: text('token_hash').notNull(),
+    expiresAt: integer('expires_at', { mode: 'timestamp' }).notNull(),
+    constraints: text('constraints'),
+    usageStats: text('usage_stats'),
+    revokedAt: integer('revoked_at', { mode: 'timestamp' }),
+    renewalCount: integer('renewal_count').notNull().default(0),
+    maxRenewals: integer('max_renewals').notNull().default(30),
+    lastRenewedAt: integer('last_renewed_at', { mode: 'timestamp' }),
+    absoluteExpiresAt: integer('absolute_expires_at', { mode: 'timestamp' }).notNull(),
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+}, (table) => [
+    index('idx_sessions_wallet_id').on(table.walletId),
+    index('idx_sessions_expires_at').on(table.expiresAt),
+    index('idx_sessions_token_hash').on(table.tokenHash),
+]);
+// ---------------------------------------------------------------------------
+// Table 3: transactions -- on-chain transaction records
+// ---------------------------------------------------------------------------
+export const transactions = sqliteTable('transactions', {
+    id: text('id').primaryKey(),
+    walletId: text('wallet_id')
+        .notNull()
+        .references(() => wallets.id, { onDelete: 'restrict' }),
+    sessionId: text('session_id').references(() => sessions.id, { onDelete: 'set null' }),
+    chain: text('chain').notNull(),
+    txHash: text('tx_hash'),
+    type: text('type').notNull(),
+    amount: text('amount'),
+    toAddress: text('to_address'),
+    tokenMint: text('token_mint'),
+    contractAddress: text('contract_address'),
+    methodSignature: text('method_signature'),
+    spenderAddress: text('spender_address'),
+    approvedAmount: text('approved_amount'),
+    parentId: text('parent_id').references(() => transactions.id, {
+        onDelete: 'cascade',
+    }),
+    batchIndex: integer('batch_index'),
+    status: text('status').notNull().default('PENDING'),
+    tier: text('tier'),
+    queuedAt: integer('queued_at', { mode: 'timestamp' }),
+    executedAt: integer('executed_at', { mode: 'timestamp' }),
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+    reservedAmount: text('reserved_amount'),
+    amountUsd: real('amount_usd'),
+    reservedAmountUsd: real('reserved_amount_usd'),
+    error: text('error'),
+    metadata: text('metadata'),
+    network: text('network'),
+}, (table) => [
+    index('idx_transactions_wallet_status').on(table.walletId, table.status),
+    index('idx_transactions_session_id').on(table.sessionId),
+    uniqueIndex('idx_transactions_tx_hash').on(table.txHash),
+    index('idx_transactions_queued_at').on(table.queuedAt),
+    index('idx_transactions_created_at').on(table.createdAt),
+    index('idx_transactions_type').on(table.type),
+    index('idx_transactions_contract_address').on(table.contractAddress),
+    index('idx_transactions_parent_id').on(table.parentId),
+    check('check_tx_type', buildCheckSql('type', TRANSACTION_TYPES)),
+    check('check_tx_status', buildCheckSql('status', TRANSACTION_STATUSES)),
+    check('check_tx_tier', sql.raw(`tier IS NULL OR tier IN (${POLICY_TIERS.map((v) => `'${v}'`).join(', ')})`)),
+    check('check_tx_network', sql.raw(`network IS NULL OR network IN (${NETWORK_TYPES.map((v) => `'${v}'`).join(', ')})`)),
+]);
+// ---------------------------------------------------------------------------
+// Table 4: policies -- wallet and global policy rules
+// ---------------------------------------------------------------------------
+export const policies = sqliteTable('policies', {
+    id: text('id').primaryKey(),
+    walletId: text('wallet_id').references(() => wallets.id, { onDelete: 'cascade' }),
+    type: text('type').notNull(),
+    rules: text('rules').notNull(),
+    priority: integer('priority').notNull().default(0),
+    enabled: integer('enabled', { mode: 'boolean' }).notNull().default(true),
+    network: text('network'),
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+    updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull(),
+}, (table) => [
+    index('idx_policies_wallet_enabled').on(table.walletId, table.enabled),
+    index('idx_policies_type').on(table.type),
+    index('idx_policies_network').on(table.network),
+    check('check_policy_type', buildCheckSql('type', POLICY_TYPES)),
+    check('check_policy_network', sql.raw(`network IS NULL OR network IN (${NETWORK_TYPES.map((v) => `'${v}'`).join(', ')})`)),
+]);
+// ---------------------------------------------------------------------------
+// Table 5: pending_approvals -- APPROVAL tier owner sign-off tracking
+// ---------------------------------------------------------------------------
+export const pendingApprovals = sqliteTable('pending_approvals', {
+    id: text('id').primaryKey(),
+    txId: text('tx_id')
+        .notNull()
+        .references(() => transactions.id, { onDelete: 'cascade' }),
+    requiredBy: integer('required_by', { mode: 'timestamp' }).notNull(),
+    expiresAt: integer('expires_at', { mode: 'timestamp' }).notNull(),
+    approvedAt: integer('approved_at', { mode: 'timestamp' }),
+    rejectedAt: integer('rejected_at', { mode: 'timestamp' }),
+    ownerSignature: text('owner_signature'),
+    approvalChannel: text('approval_channel').default('rest_api'),
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+}, (table) => [
+    index('idx_pending_approvals_tx_id').on(table.txId),
+    index('idx_pending_approvals_expires_at').on(table.expiresAt),
+]);
+// ---------------------------------------------------------------------------
+// Table 6: audit_log -- append-only security event log
+// ---------------------------------------------------------------------------
+export const auditLog = sqliteTable('audit_log', {
+    id: integer('id').primaryKey({ autoIncrement: true }),
+    timestamp: integer('timestamp', { mode: 'timestamp' }).notNull(),
+    eventType: text('event_type').notNull(),
+    actor: text('actor').notNull(),
+    walletId: text('wallet_id'),
+    sessionId: text('session_id'),
+    txId: text('tx_id'),
+    details: text('details').notNull(),
+    severity: text('severity').notNull().default('info'),
+    ipAddress: text('ip_address'),
+}, (table) => [
+    index('idx_audit_log_timestamp').on(table.timestamp),
+    index('idx_audit_log_event_type').on(table.eventType),
+    index('idx_audit_log_wallet_id').on(table.walletId),
+    index('idx_audit_log_severity').on(table.severity),
+    index('idx_audit_log_wallet_timestamp').on(table.walletId, table.timestamp),
+    check('check_severity', sql `severity IN ('info', 'warning', 'critical')`),
+]);
+// ---------------------------------------------------------------------------
+// Table 7: key_value_store -- system state (JWT secret, daemon metadata)
+// ---------------------------------------------------------------------------
+export const keyValueStore = sqliteTable('key_value_store', {
+    key: text('key').primaryKey(),
+    value: text('value').notNull(),
+    updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull(),
+});
+// ---------------------------------------------------------------------------
+// Table 8: notification_logs -- notification delivery history
+// ---------------------------------------------------------------------------
+export const notificationLogs = sqliteTable('notification_logs', {
+    id: text('id').primaryKey(), // UUID v7
+    eventType: text('event_type').notNull(),
+    walletId: text('wallet_id'),
+    channel: text('channel').notNull(), // telegram / discord / ntfy
+    status: text('status').notNull(), // sent / failed
+    error: text('error'), // failure error message (nullable)
+    message: text('message'), // nullable - null for pre-v10 logs
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+}, (table) => [
+    index('idx_notification_logs_event_type').on(table.eventType),
+    index('idx_notification_logs_wallet_id').on(table.walletId),
+    index('idx_notification_logs_status').on(table.status),
+    index('idx_notification_logs_created_at').on(table.createdAt),
+    check('check_notif_log_status', buildCheckSql('status', NOTIFICATION_LOG_STATUSES)),
+]);
+// ---------------------------------------------------------------------------
+// Table 9: token_registry -- EVM ERC-20 token management (builtin + custom)
+// ---------------------------------------------------------------------------
+export const tokenRegistry = sqliteTable('token_registry', {
+    id: text('id').primaryKey(), // UUID v7
+    network: text('network').notNull(), // EvmNetworkType
+    address: text('address').notNull(), // EIP-55 checksum address
+    symbol: text('symbol').notNull(),
+    name: text('name').notNull(),
+    decimals: integer('decimals').notNull(),
+    source: text('source').notNull().default('custom'), // 'builtin' | 'custom'
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+}, (table) => [
+    uniqueIndex('idx_token_registry_network_address').on(table.network, table.address),
+    index('idx_token_registry_network').on(table.network),
+    check('check_token_source', sql `source IN ('builtin', 'custom')`),
+]);
+// ---------------------------------------------------------------------------
+// Table 10: settings -- daemon operational settings (key-value)
+// ---------------------------------------------------------------------------
+export const settings = sqliteTable('settings', {
+    key: text('key').primaryKey(), // e.g., 'notifications.telegram_bot_token'
+    value: text('value').notNull(), // plain or AES-GCM encrypted (base64 JSON)
+    encrypted: integer('encrypted', { mode: 'boolean' }).notNull().default(false),
+    category: text('category').notNull(), // 'notifications' | 'rpc' | 'security' | 'daemon' | 'walletconnect'
+    updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull(),
+}, (table) => [
+    index('idx_settings_category').on(table.category),
+]);
+// ---------------------------------------------------------------------------
+// Table 11: api_keys -- Action Provider API key encrypted storage (v1.5)
+// ---------------------------------------------------------------------------
+export const apiKeys = sqliteTable('api_keys', {
+    providerName: text('provider_name').primaryKey(),
+    encryptedKey: text('encrypted_key').notNull(),
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+    updatedAt: integer('updated_at', { mode: 'timestamp' }).notNull(),
+});
+// ---------------------------------------------------------------------------
+// Table 12: telegram_users -- Telegram Bot user management (v1.6)
+// ---------------------------------------------------------------------------
+export const telegramUsers = sqliteTable('telegram_users', {
+    chatId: integer('chat_id').primaryKey(),
+    username: text('username'),
+    role: text('role').notNull().default('PENDING'),
+    registeredAt: integer('registered_at', { mode: 'timestamp' }).notNull(),
+    approvedAt: integer('approved_at', { mode: 'timestamp' }),
+}, (table) => [
+    index('idx_telegram_users_role').on(table.role),
+    check('check_telegram_role', sql `role IN ('PENDING', 'ADMIN', 'READONLY')`),
+]);
+// ---------------------------------------------------------------------------
+// Table 13: wc_sessions -- WalletConnect session metadata (v1.6.1)
+// ---------------------------------------------------------------------------
+export const wcSessions = sqliteTable('wc_sessions', {
+    walletId: text('wallet_id')
+        .primaryKey()
+        .references(() => wallets.id, { onDelete: 'cascade' }),
+    topic: text('topic').notNull().unique(),
+    peerMeta: text('peer_meta'),
+    chainId: text('chain_id').notNull(),
+    ownerAddress: text('owner_address').notNull(),
+    namespaces: text('namespaces'),
+    expiry: integer('expiry').notNull(),
+    createdAt: integer('created_at', { mode: 'timestamp' }).notNull(),
+}, (table) => [
+    index('idx_wc_sessions_topic').on(table.topic),
+]);
+// ---------------------------------------------------------------------------
+// Table 14: wc_store -- WalletConnect IKeyValueStorage (v1.6.1)
+// ---------------------------------------------------------------------------
+export const wcStore = sqliteTable('wc_store', {
+    key: text('key').primaryKey(),
+    value: text('value').notNull(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/infrastructure/database/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/infrastructure/database/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,WAAW,EACX,IAAI,EACJ,OAAO,EACP,IAAI,EACJ,KAAK,EACL,WAAW,EACX,KAAK,GAEN,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,eAAe,EACf,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAEtB,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,MAAyB,EAAE,EAAE,CAClE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEtE,8EAA8E;AAC9E,sFAAsF;AACtF,+EAA+E;AAC/E,8EAA8E;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAChC,SAAS,EACT;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAC1C,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACpD,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,aAAa,EAAE,OAAO,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtF,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,WAAW,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC3D,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,WAAW,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACzD,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC5C,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;IACzE,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACzD,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzD,KAAK,CAAC,mBAAmB,EAAE,aAAa,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAC3E,KAAK,CACH,uBAAuB,EACvB,GAAG,CAAC,GAAG,CACL,kDAAkD,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnG,CACF;IACD,KAAK,CAAC,cAAc,EAAE,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC/D,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAA,0BAA0B,CAAC;CAC7D,CACF,CAAC;AAEF,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CACjC,UAAU,EACV;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACxD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACvD,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,aAAa,EAAE,OAAO,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAChE,iBAAiB,EAAE,OAAO,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IAClF,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAClD,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACrD,CACF,CAAC;AAEF,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CACrC,cAAc,EACd;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACzD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACrF,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;IACvB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC;IACzC,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC;IACzC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,GAAoB,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE;QAC7E,QAAQ,EAAE,SAAS;KACpB,CAAC;IACF,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;IAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACrD,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzD,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC;IAC9C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IACpB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;CACzB,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;IACxE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACxD,WAAW,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IACxD,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IACtD,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACxD,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IAC7C,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;IACpE,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IACtD,KAAK,CAAC,eAAe,EAAE,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAChE,KAAK,CAAC,iBAAiB,EAAE,aAAa,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACvE,KAAK,CACH,eAAe,EACf,GAAG,CAAC,GAAG,CACL,4BAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5E,CACF;IACD,KAAK,CACH,kBAAkB,EAClB,GAAG,CAAC,GAAG,CACL,kCAAkC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnF,CACF;CACF,CACF,CAAC;AAEF,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CACjC,UAAU,EACV;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACjF,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;IACtE,KAAK,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IACzC,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IAC/C,KAAK,CAAC,mBAAmB,EAAE,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC/D,KAAK,CACH,sBAAsB,EACtB,GAAG,CAAC,GAAG,CACL,kCAAkC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnF,CACF;CACF,CACF,CAAC;AAEF,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CACzC,mBAAmB,EACnB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;SAChB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACnE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzD,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzD,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC7D,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IACnD,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC9D,CACF,CAAC;AAEF,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CACjC,WAAW,EACX;IACE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACrD,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IAChE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;IACnB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACpD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;CAC9B,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACrD,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IACnD,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAClD,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3E,KAAK,CAAC,gBAAgB,EAAE,GAAG,CAAA,6CAA6C,CAAC;CAC1E,CACF,CAAC;AAEF,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,iBAAiB,EAAE;IAC1D,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE;IAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,CAAC,CAAC;AAEH,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CACzC,mBAAmB,EACnB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,UAAU;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,4BAA4B;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,gBAAgB;IAClD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,mCAAmC;IACzD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,mCAAmC;IAC7D,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC7D,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC3D,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IACtD,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC7D,KAAK,CAAC,wBAAwB,EAAE,aAAa,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;CACpF,CACF,CAAC;AAEF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CACtC,gBAAgB,EAChB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,UAAU;IACvC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,iBAAiB;IACrD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,0BAA0B;IAC9D,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,uBAAuB;IAC3E,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,WAAW,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;IAClF,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACrD,KAAK,CAAC,oBAAoB,EAAE,GAAG,CAAA,iCAAiC,CAAC;CAClE,CACF,CAAC;AAEF,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CACjC,UAAU,EACV;IACE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,2CAA2C;IAC1E,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,2CAA2C;IAC3E,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7E,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,oEAAoE;IAC1G,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;CAClD,CACF,CAAC;AAEF,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE;IAC7C,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE;IAChD,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,CAAC,CAAC;AAEH,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CACtC,gBAAgB,EAChB;IACE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/C,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACvE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;CAC1D,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/C,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAA,0CAA0C,CAAC;CAC5E,CACF,CAAC;AAEF,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CACnC,aAAa,EACb;IACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,UAAU,EAAE;SACZ,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACxD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IACnC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;CAC/C,CACF,CAAC;AAEF,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE;IAC7C,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE;IAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;CAC/B,CAAC,CAAC"}

package/dist/infrastructure/jwt/index.d.ts

@@ -0,0 +1,2 @@
+export { JwtSecretManager, type JwtPayload } from './jwt-secret-manager.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/infrastructure/jwt/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/jwt/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/infrastructure/jwt/index.js

@@ -0,0 +1,2 @@
+export { JwtSecretManager } from './jwt-secret-manager.js';
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/jwt/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infrastructure/jwt/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAmB,MAAM,yBAAyB,CAAC"}

package/dist/infrastructure/jwt/jwt-secret-manager.d.ts

@@ -0,0 +1,58 @@
+/**
+ * JWT Secret Manager: generates, stores, rotates JWT secrets with dual-key window.
+ *
+ * Secrets are stored in the key_value_store SQLite table via Drizzle ORM.
+ * Dual-key rotation: after rotation, old key remains valid for 5 minutes.
+ *
+ * Storage keys:
+ *   - jwt_secret_current:  JSON { secret: hex, createdAt: epoch_seconds }
+ *   - jwt_secret_previous: JSON { secret: hex, createdAt: epoch_seconds }
+ *
+ * Token format: wai_sess_<JWT> (HS256)
+ *
+ * @see docs/52-auth-redesign.md
+ */
+import type { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+import type * as schema from '../database/schema.js';
+export interface JwtPayload {
+    sub: string;
+    wlt: string;
+    iat: number;
+    exp: number;
+}
+export declare class JwtSecretManager {
+    private db;
+    private _currentSecret;
+    private _previousSecret;
+    constructor(db: BetterSQLite3Database<typeof schema>);
+    /**
+     * Initialize: generate new secret on first run, or load existing from DB.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Return the current hex secret string.
+     */
+    getCurrentSecret(): Promise<string>;
+    /**
+     * Return array of valid secrets. Normally just [current].
+     * During rotation window (previous exists and rotation was < 5 minutes ago),
+     * returns [current, previous].
+     */
+    getValidSecrets(): Promise<string[]>;
+    /**
+     * Rotate the JWT secret. Generate new, move current to previous.
+     * Throws ROTATION_TOO_RECENT if last rotation was < 5 minutes ago.
+     */
+    rotateSecret(): Promise<void>;
+    /**
+     * Sign a JWT payload. Returns wai_sess_ prefixed token.
+     */
+    signToken(payload: JwtPayload): Promise<string>;
+    /**
+     * Verify a wai_sess_ prefixed token against valid secrets.
+     * Returns decoded JwtPayload on success.
+     * Throws TOKEN_EXPIRED for expired tokens, INVALID_TOKEN for all other failures.
+     */
+    verifyToken(token: string): Promise<JwtPayload>;
+}
+//# sourceMappingURL=jwt-secret-manager.d.ts.map

package/dist/infrastructure/jwt/jwt-secret-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-secret-manager.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/jwt/jwt-secret-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGxE,OAAO,KAAK,KAAK,MAAM,MAAM,uBAAuB,CAAC;AAOrD,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAqBD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,EAAE,CAAuC;IACjD,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,eAAe,CAA6B;gBAExC,EAAE,EAAE,qBAAqB,CAAC,OAAO,MAAM,CAAC;IAIpD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAuCjC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAOzC;;;;OAIG;IACG,eAAe,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAkB1C;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IA0DnC;;OAEG;IACG,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBrD;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CA2CtD"}

package/dist/infrastructure/jwt/jwt-secret-manager.js

@@ -0,0 +1,222 @@
+/**
+ * JWT Secret Manager: generates, stores, rotates JWT secrets with dual-key window.
+ *
+ * Secrets are stored in the key_value_store SQLite table via Drizzle ORM.
+ * Dual-key rotation: after rotation, old key remains valid for 5 minutes.
+ *
+ * Storage keys:
+ *   - jwt_secret_current:  JSON { secret: hex, createdAt: epoch_seconds }
+ *   - jwt_secret_previous: JSON { secret: hex, createdAt: epoch_seconds }
+ *
+ * Token format: wai_sess_<JWT> (HS256)
+ *
+ * @see docs/52-auth-redesign.md
+ */
+import { randomBytes } from 'node:crypto';
+import { SignJWT, jwtVerify, errors as joseErrors } from 'jose';
+import { eq } from 'drizzle-orm';
+import { WAIaaSError } from '@waiaas/core';
+import { keyValueStore } from '../database/schema.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const TOKEN_PREFIX = 'wai_sess_';
+const KEY_CURRENT = 'jwt_secret_current';
+const KEY_PREVIOUS = 'jwt_secret_previous';
+const ROTATION_WINDOW_SECONDS = 5 * 60; // 5 minutes
+const SECRET_BYTES = 32; // 256-bit
+// ---------------------------------------------------------------------------
+// JwtSecretManager
+// ---------------------------------------------------------------------------
+export class JwtSecretManager {
+    db;
+    _currentSecret = null;
+    _previousSecret = null;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Initialize: generate new secret on first run, or load existing from DB.
+     */
+    async initialize() {
+        const existing = this.db
+            .select()
+            .from(keyValueStore)
+            .where(eq(keyValueStore.key, KEY_CURRENT))
+            .get();
+        if (existing) {
+            this._currentSecret = JSON.parse(existing.value);
+        }
+        else {
+            const secret = randomBytes(SECRET_BYTES).toString('hex');
+            const nowSec = Math.floor(Date.now() / 1000);
+            const stored = { secret, createdAt: nowSec };
+            this.db
+                .insert(keyValueStore)
+                .values({
+                key: KEY_CURRENT,
+                value: JSON.stringify(stored),
+                updatedAt: new Date(nowSec * 1000),
+            })
+                .onConflictDoNothing()
+                .run();
+            this._currentSecret = stored;
+        }
+        // Load previous secret if exists
+        const prev = this.db
+            .select()
+            .from(keyValueStore)
+            .where(eq(keyValueStore.key, KEY_PREVIOUS))
+            .get();
+        if (prev) {
+            this._previousSecret = JSON.parse(prev.value);
+        }
+    }
+    /**
+     * Return the current hex secret string.
+     */
+    async getCurrentSecret() {
+        if (!this._currentSecret) {
+            throw new Error('JwtSecretManager not initialized. Call initialize() first.');
+        }
+        return this._currentSecret.secret;
+    }
+    /**
+     * Return array of valid secrets. Normally just [current].
+     * During rotation window (previous exists and rotation was < 5 minutes ago),
+     * returns [current, previous].
+     */
+    async getValidSecrets() {
+        if (!this._currentSecret) {
+            throw new Error('JwtSecretManager not initialized. Call initialize() first.');
+        }
+        const secrets = [this._currentSecret.secret];
+        if (this._previousSecret) {
+            const nowSec = Math.floor(Date.now() / 1000);
+            const elapsed = nowSec - this._currentSecret.createdAt;
+            if (elapsed < ROTATION_WINDOW_SECONDS) {
+                secrets.push(this._previousSecret.secret);
+            }
+        }
+        return secrets;
+    }
+    /**
+     * Rotate the JWT secret. Generate new, move current to previous.
+     * Throws ROTATION_TOO_RECENT if last rotation was < 5 minutes ago.
+     */
+    async rotateSecret() {
+        if (!this._currentSecret) {
+            throw new Error('JwtSecretManager not initialized. Call initialize() first.');
+        }
+        const nowSec = Math.floor(Date.now() / 1000);
+        const elapsed = nowSec - this._currentSecret.createdAt;
+        if (elapsed < ROTATION_WINDOW_SECONDS) {
+            throw new WAIaaSError('ROTATION_TOO_RECENT', {
+                message: `Key rotation attempted too recently. Wait ${ROTATION_WINDOW_SECONDS - elapsed} seconds.`,
+            });
+        }
+        const newSecret = randomBytes(SECRET_BYTES).toString('hex');
+        const newStored = { secret: newSecret, createdAt: nowSec };
+        const oldStored = this._currentSecret;
+        // Single DB transaction: move current -> previous, store new current
+        this.db.transaction((tx) => {
+            // Store old as previous
+            tx.insert(keyValueStore)
+                .values({
+                key: KEY_PREVIOUS,
+                value: JSON.stringify(oldStored),
+                updatedAt: new Date(nowSec * 1000),
+            })
+                .onConflictDoUpdate({
+                target: keyValueStore.key,
+                set: {
+                    value: JSON.stringify(oldStored),
+                    updatedAt: new Date(nowSec * 1000),
+                },
+            })
+                .run();
+            // Store new as current
+            tx.insert(keyValueStore)
+                .values({
+                key: KEY_CURRENT,
+                value: JSON.stringify(newStored),
+                updatedAt: new Date(nowSec * 1000),
+            })
+                .onConflictDoUpdate({
+                target: keyValueStore.key,
+                set: {
+                    value: JSON.stringify(newStored),
+                    updatedAt: new Date(nowSec * 1000),
+                },
+            })
+                .run();
+        });
+        // Update in-memory cache
+        this._previousSecret = oldStored;
+        this._currentSecret = newStored;
+    }
+    /**
+     * Sign a JWT payload. Returns wai_sess_ prefixed token.
+     */
+    async signToken(payload) {
+        if (!this._currentSecret) {
+            throw new Error('JwtSecretManager not initialized. Call initialize() first.');
+        }
+        const secretKey = Buffer.from(this._currentSecret.secret, 'hex');
+        const jwt = await new SignJWT({
+            sub: payload.sub,
+            wlt: payload.wlt,
+        })
+            .setProtectedHeader({ alg: 'HS256' })
+            .setIssuedAt(payload.iat)
+            .setExpirationTime(payload.exp)
+            .sign(secretKey);
+        return TOKEN_PREFIX + jwt;
+    }
+    /**
+     * Verify a wai_sess_ prefixed token against valid secrets.
+     * Returns decoded JwtPayload on success.
+     * Throws TOKEN_EXPIRED for expired tokens, INVALID_TOKEN for all other failures.
+     */
+    async verifyToken(token) {
+        if (!token.startsWith(TOKEN_PREFIX)) {
+            throw new WAIaaSError('INVALID_TOKEN', {
+                message: 'Token must start with wai_sess_ prefix',
+            });
+        }
+        const jwt = token.slice(TOKEN_PREFIX.length);
+        const validSecrets = await this.getValidSecrets();
+        let lastError;
+        for (const secret of validSecrets) {
+            try {
+                const secretKey = Buffer.from(secret, 'hex');
+                const { payload } = await jwtVerify(jwt, secretKey, {
+                    algorithms: ['HS256'],
+                });
+                return {
+                    sub: payload.sub,
+                    wlt: payload.wlt,
+                    iat: payload.iat,
+                    exp: payload.exp,
+                };
+            }
+            catch (err) {
+                lastError = err;
+                // If expired, throw immediately (no need to try other keys)
+                if (err instanceof joseErrors.JWTExpired) {
+                    throw new WAIaaSError('TOKEN_EXPIRED', {
+                        message: 'Authentication token has expired',
+                        cause: err,
+                    });
+                }
+                // Try next secret
+                continue;
+            }
+        }
+        throw new WAIaaSError('INVALID_TOKEN', {
+            message: 'Invalid authentication token',
+            cause: lastError instanceof Error ? lastError : undefined,
+        });
+    }
+}
+//# sourceMappingURL=jwt-secret-manager.js.map

package/dist/infrastructure/jwt/jwt-secret-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-secret-manager.js","sourceRoot":"","sources":["../../../src/infrastructure/jwt/jwt-secret-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,MAAM,CAAC;AAEhE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAkBtD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY;AACpD,MAAM,YAAY,GAAG,EAAE,CAAC,CAAC,UAAU;AAEnC,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,OAAO,gBAAgB;IACnB,EAAE,CAAuC;IACzC,cAAc,GAAwB,IAAI,CAAC;IAC3C,eAAe,GAAwB,IAAI,CAAC;IAEpD,YAAY,EAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;aACzC,GAAG,EAAE,CAAC;QAET,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAiB,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YAE3D,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,aAAa,CAAC;iBACrB,MAAM,CAAC;gBACN,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;aACnC,CAAC;iBACD,mBAAmB,EAAE;iBACrB,GAAG,EAAE,CAAC;YAET,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC/B,CAAC;QAED,iCAAiC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;aAC1C,GAAG,EAAE,CAAC;QAET,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAiB,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YACvD,IAAI,OAAO,GAAG,uBAAuB,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;QAEvD,IAAI,OAAO,GAAG,uBAAuB,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE;gBAC3C,OAAO,EAAE,6CAA6C,uBAAuB,GAAG,OAAO,WAAW;aACnG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC;QAEtC,qEAAqE;QACrE,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,wBAAwB;YACxB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;iBACrB,MAAM,CAAC;gBACN,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;aACnC,CAAC;iBACD,kBAAkB,CAAC;gBAClB,MAAM,EAAE,aAAa,CAAC,GAAG;gBACzB,GAAG,EAAE;oBACH,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;oBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;iBACnC;aACF,CAAC;iBACD,GAAG,EAAE,CAAC;YAET,uBAAuB;YACvB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;iBACrB,MAAM,CAAC;gBACN,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;aACnC,CAAC;iBACD,kBAAkB,CAAC;gBAClB,MAAM,EAAE,aAAa,CAAC,GAAG;gBACzB,GAAG,EAAE;oBACH,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;oBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;iBACnC;aACF,CAAC;iBACD,GAAG,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QAEH,yBAAyB;QACzB,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,OAAmB;QACjC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEjE,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;aACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;aACxB,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;aAC9B,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,OAAO,YAAY,GAAG,GAAG,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE;gBACrC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAElD,IAAI,SAAkB,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE;oBAClD,UAAU,EAAE,CAAC,OAAO,CAAC;iBACtB,CAAC,CAAC;gBAEH,OAAO;oBACL,GAAG,EAAE,OAAO,CAAC,GAAa;oBAC1B,GAAG,EAAE,OAAO,CAAC,GAAa;oBAC1B,GAAG,EAAE,OAAO,CAAC,GAAa;oBAC1B,GAAG,EAAE,OAAO,CAAC,GAAa;iBAC3B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,CAAC;gBAChB,4DAA4D;gBAC5D,IAAI,GAAG,YAAY,UAAU,CAAC,UAAU,EAAE,CAAC;oBACzC,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE;wBACrC,OAAO,EAAE,kCAAkC;wBAC3C,KAAK,EAAE,GAAG;qBACX,CAAC,CAAC;gBACL,CAAC;gBACD,kBAAkB;gBAClB,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE;YACrC,OAAO,EAAE,8BAA8B;YACvC,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;IACL,CAAC;CACF"}