@wildo-ai/saas-backend-lib 1.1.12 → 1.1.13

package/dist/esm/compliance/electronic-signatures/pdf-signature-structure.backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"pdf-signature-structure.backend.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/pdf-signature-structure.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAEnH,8FAA8F;AAC9F,MAAM,CAAN,IAAY,4BAaX;AAbD,WAAY,4BAA4B;IACtC,uEAAuE;IACvE,6DAA6B,CAAA;IAC7B,kHAAkH;IAClH,6EAA6C,CAAA;IAC7C,0EAA0E;IAC1E,2GAA2E,CAAA;IAC3E,0EAA0E;IAC1E,+EAA+C,CAAA;IAC/C,0FAA0F;IAC1F,iFAAiD,CAAA;IACjD,6HAA6H;IAC7H,2EAA2C,CAAA;AAC7C,CAAC,EAbW,4BAA4B,KAA5B,4BAA4B,QAavC;AAgBD,kGAAkG;AAClG,MAAM,CAAC,MAAM,iCAAiC,GAAwB,IAAI,GAAG,CAAC,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAY9H,8GAA8G;AAC9G,MAAM,UAAU,4BAA4B,CAAC,IAAgB,EAAE,qBAA6B;IAC1F,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,CAAC,mBAAmB,EAAE,MAAM,EAAE,+BAA+B,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACvJ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,OAAqC,EAAE,MAAc;IACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,IAAgB,EAAE,qBAA6B;IAC9D,2EAA2E;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,wDAAwD,CAAC;IAClF,KAAK,IAAI,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzF,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAqC,CAAC;QAC5I,IAAI,KAAK,KAAK,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,WAAW,IAAI,WAAW,IAAI,WAAW,GAAG,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClH,OAAO,MAAM,CAAC,4BAA4B,CAAC,oBAAoB,EAAE,6BAA6B,KAAK,IAAI,WAAW,IAAI,WAAW,IAAI,YAAY,6DAA6D,CAAC,CAAC;QAClN,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,4BAA4B,CAAC,oBAAoB,EAAE,6CAA6C,WAAW,IAAI,WAAW,yCAAyC,CAAC,CAAC;QACrL,CAAC;QACD,oFAAoF;QACpF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,WAAW,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,WAAW,GAAG,WAAW,IAAI,WAAW,GAAG,SAAS,EAAE,CAAC;YAC7F,OAAO,MAAM,CAAC,4BAA4B,CAAC,oBAAoB,EAAE,6FAA6F,CAAC,CAAC;QAClK,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC;YAC1D,QAAQ,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;YACpF,SAAS,EAAE,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,kBAAkB,EAAE,YAAY,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,UAAU,EAAE,WAAW,GAAG,YAAY;SACvC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,YAAY,EAAE,gCAAgC,CAAC,CAAC;IACxH,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEzE,oEAAoE;IACpE,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,4BAA4B,CAAC,qBAAqB,EAAE,sHAAsH,CAAC,CAAC;IAC5L,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,UAAU,CAAC;IAClE,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACxF,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAgB,EAAE,IAAY,EAAE,MAAc,EAAE,MAAc;IAC1F,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/G,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;aACtE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,IAAI,MAAM,GAAG,MAAM;gBAAE,SAAS;YAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC;QACpG,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAeD,sFAAsF;AACtF,IAAK,0BAOJ;AAPD,WAAK,0BAA0B;IAC7B,yDAAyD;IACzD,+CAAiB,CAAA;IACjB,mCAAmC;IACnC,2CAAa,CAAA;IACb,2FAA2F;IAC3F,uDAAyB,CAAA;AAC3B,CAAC,EAPI,0BAA0B,KAA1B,0BAA0B,QAO9B;AAsBD,mEAAmE;AACnE,MAAM,kBAAmB,SAAQ,KAAK;CAAG;AAEzC;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,eAAe,GAA6B,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAmE,EAAE,CAAC;IACpF,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,SAAS,CAAC;QACR,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM;QAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,SAAS;gBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;YACzH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,UAA8B,CAAC;YACnC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/C,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,SAAS,GAAG,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAClD,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI;oBAAE,SAAS,IAAI,CAAC,CAAC;qBACxE,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;oBAAE,SAAS,IAAI,CAAC,CAAC;;oBAC7C,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC;gBACrG,+GAA+G;gBAC/G,8GAA8G;gBAC9G,sHAAsH;gBACtH,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC7E,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;gBACvD,MAAM,CAAC,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;gBACrC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;gBACxJ,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC;gBACtC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;YACtI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC;YACnC,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACjL,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;gBACxI,eAAe,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC1D,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;YACrC,eAAe,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/D,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,eAAe,GAAG,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;YACvF,IAAI,eAAe,GAAG,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;YAC/G,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3D,eAAe,GAAG,CAAC,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC;YAC1C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;YAChF,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACpC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE,iEAAiE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;AACjF,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc,CAAC,IAAY,EAAE,UAA2C,EAAE,IAAY;IAC7F,MAAM,GAAG,GAAG,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,GAAG,kBAAkB,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,oBAAoB,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvI,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,GAAG,yCAAyC,CAAC,CAAC;IAClH,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,4GAA4G;AAC5G,SAAS,uBAAuB,CAAC,IAAY,EAAE,MAAoB;IACjE,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,SAAS,CAAC;QACR,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAChE,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,MAAM,CAAC,QAAQ,iBAAiB,CAAC,CAAC;QACnH,MAAM,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;YACxG,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,KAAK,GAAG,KAAK,iBAAiB,CAAC,CAAC;YAClG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChM,CAAC;IACH,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAS,2BAA2B,CAAC,UAA+B,EAAE,IAAY;IAChF,MAAM,MAAM,GAAG,CAAC,mCAAmC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,KAAK,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,kBAAkB;QAAE,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;SACrH,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;IACvG,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACvD,MAAM,UAAU,GAAG,0BAA0B,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,SAAS,IAAI,EAAE;QAAE,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;SAClG,IAAI,SAAS,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1H,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACtD,KAAK,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAE,EAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAE,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAE,EAAE,MAAM,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAChG,MAAM,EAAE,GAAG,GAAG,GAAG,SAAS,CAAC;YAC3B,IAAI,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAC;YACvH,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,QAAgB,EAAE,EAAE;gBAC/D,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,QAAQ,CAAC;gBACjC,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,CAAC;oBAAE,KAAK,GAAG,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,EAAE,GAAG,KAAK,GAAG,MAAM,CAAE,CAAC;gBACpG,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,UAAU,CAAC;YACnJ,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4GAA4G;AAC5G,SAAS,gBAAgB,CAAC,KAAa,EAAE,OAAe;IACtD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QAClE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,IAAI,IAAI,KAAK,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;iBACtD,IAAI,IAAI,KAAK,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;iBACzD,IAAI,IAAI,KAAK,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;iBAClF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC;gBACpC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC;gBACvG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;YAC/F,CAAC;iBAAM,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,QAAQ,GAAG,GAAG,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAAY,EAAE,cAAsB,EAAE,UAAwC,EAAE,WAAmB;IACnI,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;IAC9E,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,sGAAsG,CAAC,CAAC;IAC1K,CAAC;IACD,KAAK,UAAU,CAAC;IAChB,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,gDAAgD,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChJ,CAAC;IAED,kFAAkF;IAClF,oHAAoH;IACpH,uHAAuH;IACvH,yEAAyE;IACzE,uHAAuH;IACvH,sGAAsG;IACtG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,kBAAkB,GAAG,YAAY,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,kFAAkF,CAAC,CAAC;IACzJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,4EAA4E,CAAC,CAAC;IACnJ,CAAC;IACD,uHAAuH;IACvH,oHAAoH;IACpH,sHAAsH;IACtH,4CAA4C;IAC5C,IAAI,YAAY,GAAG,mBAAmB,CAAC;IACvC,KAAK,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,wHAAwH;QACxH,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,gFAAgF,CAAC,CAAC;QACvJ,CAAC;QACD,YAAY,GAAG,aAAa,CAAC;QAC7B,sHAAsH;QACtH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,aAAa,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,2FAA2F,CAAC,CAAC;YAClK,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,gEAAgE,CAAC,CAAC;QACvI,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,eAAe,IAAI,kBAAkB,CAAC,OAAO,CAAC,KAAK,kBAAkB,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACxJ,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,yDAAyD,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;IAED,kHAAkH;IAClH,kHAAkH;IAClH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,UAAU,EAAE,CAAC;YACzD,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,UAAU,KAAK,CAAC,MAAM,uEAAuE,CAAC,CAAC;QACjK,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC3H,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,oDAAoD,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1I,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,gDAAgD,KAAK,CAAC,MAAM,4DAA4D,CAAC,CAAC;QAC/L,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEtE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC;QACxD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAClF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,IAAI,QAAQ,KAAK,SAAS,CAAC;QAE7E,IAAI,aAAa,EAAE,CAAC;YAClB,6EAA6E;YAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,UAAU,MAAM,CAAC,MAAM,4FAA4F,CAAC,CAAC;YACvL,CAAC;YACD,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,uCAAuC,CAAC;gBACxL,IAAI,OAAO;oBAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;gBACtG,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;YACvK,IAAI,OAAO;gBAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,UAAU,MAAM,CAAC,MAAM,0FAA0F,CAAC,CAAC;QACrL,CAAC;QACD,IAAI,IAAI,KAAK,OAAO;YAAE,SAAS;QAC/B,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;gBACvC,OAAO,MAAM,CAAC,4BAA4B,CAAC,mCAAmC,EAAE,UAAU,MAAM,CAAC,MAAM,sEAAsE,CAAC,CAAC;YACjL,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvD,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0HAA0H;AAC1H,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/I,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/E,oHAAoH;AACpH,MAAM,mBAAmB,GAAsB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAE5E,SAAS,kBAAkB,CAAC,MAAyB,EAAE,UAA2C;IAChG,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC,CAAC,mFAAmF;IACtH,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,WAAW,IAAI,wBAAwB,CAAC;IAC7H,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,qDAAqD,CAAC;IACpI,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClG,IAAI,CAAC,OAAO,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,UAAU,MAAM,CAAC,MAAM,WAAW,OAAO,IAAI,SAAS,sDAAsD,CAAC;IAClL,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5F,OAAO,UAAU,MAAM,CAAC,MAAM,+CAA+C,CAAC;IAChF,CAAC;IACD,+FAA+F;IAC/F,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,WAAW,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;IAC5I,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,SAAS;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,yBAAyB,SAAS,GAAG,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mGAAmG;AACnG,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AACpF,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACvE,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAElG,SAAS,qBAAqB,CAC5B,MAAyB,EACzB,UAA2C,EAC3C,QAA2B,EAC3B,IAA6G;IAE7G,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,4GAA4G;IAC5G,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,UAAU,IAAI,kBAAkB;QAAE,OAAO,SAAS,CAAC;IAChH,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,WAAW,IAAI,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAC3J,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,+CAA+C,CAAC;IACxH,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,4FAA4F;QAC5F,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC1K,OAAO,UAAU,MAAM,CAAC,MAAM,6DAA6D,CAAC;QAC9F,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,kBAAkB;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,qCAAqC,CAAC;IAC7F,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IAClI,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,mCAAmC,CAAC;IAC9G,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,SAAS;YAAE,OAAO,UAAU,MAAM,CAAC,MAAM,qBAAqB,SAAS,GAAG,CAAC;IACjF,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AACxF,CAAC;AAED,iIAAiI;AACjI,SAAS,sBAAsB,CAAC,MAAyB,EAAE,UAA2C,EAAE,QAA2B,EAAE,UAA+B;IAClK,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,kBAAkB;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,8BAA8B,CAAC;IACxH,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,SAAS;QAAE,OAAO,4BAA4B,SAAS,GAAG,CAAC;IAC/D,OAAO,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAyB,EAAE,MAA2B,EAAE,KAA0B,EAAE,UAA+B,EAAE,IAAwB;IACzK,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,GAAG,wBAAwB,CAAC;IAC3I,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0GAA0G;AAC1G,SAAS,aAAa,CAAC,MAAyB,EAAE,UAA2C;IAC3F,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpD,qHAAqH;IACrH,sDAAsD;IACtD,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACjJ,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAyB,EAAE,cAAsB,EAAE,QAAsC;IACjI,IAAI,KAAoC,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM;QAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,KAAK,GAAG,SAAS,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,oBAAoB,MAAM,CAAC,MAAM,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACvF,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvG,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YAC3D,IAAI,MAAM;gBAAE,KAAK,GAAG,MAAM,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;QAChF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yGAAyG;AACzG,SAAS,aAAa,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa;IAChE,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnC,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,QAAsC;IACpF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7J,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,uHAAuH;IACvH,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,2CAA2C,CAAC,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,iHAAiH;IACjH,iFAAiF;IACjF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;AAC/D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,KAAK,GAAG,2EAA2E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtG,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAClG,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4GAA4G;AAC5G,MAAM,YAAY;IAGa;IAA6C;IAF1E,QAAQ,CAAS;IAEjB,YAA6B,IAAY,EAAE,IAAY,EAAmB,GAAW;QAAxD,SAAI,GAAJ,IAAI,CAAQ;QAAiC,QAAG,GAAH,GAAG,CAAQ;QACnF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAC5C,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI;oBAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC9H,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO;YACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,iHAAiH;IACjH,qBAAqB;QACnB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QACjE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,SAAS,CAAC;YACR,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAChD,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACnB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC5G,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,qHAAqH;IACrH,SAAS;QACP,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,qBAAqB,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YACrD,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,SAAS,CAAC;gBACR,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG;oBAAE,OAAO,SAAS,CAAC;gBAChD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;oBACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,SAAS;oBAAE,OAAO,SAAS,CAAC;YACvD,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,yEAAyE;QACzE,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACtH,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClC,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACzH,IAAI,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,iBAAiB;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAC5C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;YAClC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["/**\n * # The structure of a signed PDF (#2293): what the signatures cover, and what was added after the bytes sent\n *\n * The byte-level half of validating a signed deliverable. It reads no cryptography (the signed-document validator does)\n * and answers three questions about the file the vendor returned:\n *\n * 1. **Where are the signatures, and what do they cover?** Each signature dictionary names a `/ByteRange [0 a b c]`: the\n *    signed bytes are `[0, a)` and `[b, b + c)`, and the gap `[a, b)` must be exactly the `/Contents` hex string, which holds\n *    the CMS signature. A range that does not start at 0, whose gap is not that hex string, or that runs past the file is\n *    refused.\n * 2. **Do the signatures extend the bytes that were sent?** An electronic signature is applied as an INCREMENTAL UPDATE:\n *    the vendor appends to the file it was given. So the file must start with exactly the bytes the approver approved,\n *    ending at one of their `%%EOF` markers, and that prefix must hash to the request's `originalContentSha256`. A vendor\n *    that rewrites the file (re-saves it, flattens it) is refused: what was signed is then not provably what was sent.\n * 3. **Is everything appended after those bytes a PERMITTED change?** Signing adds a signature dictionary, a signature\n *    field and its widget, an appearance, a form, a page's `/Annots` and the catalog's `/AcroForm`; a validation update\n *    adds a `/DSS`. Anything else appended (a new page, changed page content, another kind of annotation over the text, a\n *    catalog swapped through the trailer) is refused, and so is anything after the LAST signature that is not a DSS\n *    update: nothing signed covers it.\n *\n * ## How the appended bytes are read, and the limits that are stated\n *\n * They are WALKED strictly, the way a reader meets them: indirect objects, each closed by `endobj` and a stream's data\n * delimited by its `/Length`; cross-reference sections (tables, and cross-reference streams decoded with FlateDecode and\n * the PNG predictors); trailers; `startxref`; comments. Any other byte is refused, so no object can hide inside another's\n * bytes. Every cross-reference entry appended must point at an object the walk read, by its number and generation, so a\n * reader cannot be sent to bytes the analysis did not judge; freeing an object of the original is refused. An object\n * whose number the original or an earlier revision defined is a REDEFINITION, whatever type it now claims, and is judged\n * against what it replaces: only the catalog's `/AcroForm` and `/DSS`, a page's `/Annots`, a form's fields, an indirect\n * array a page's `/Annots` or a form's `/Fields` names (which may only grow), the trailer's `/Info` dictionary and an XMP\n * stream that was already one may change. After the last signature only NEW `/DSS` data and the catalog's `/DSS` may\n * appear. A form may not gain `/XFA` or `/NeedAppearances`, and the appended trailers keep the original's catalog and\n * encryption.\n *\n * Refused as unreadable: an appended object stream (its objects cannot be read without decompressing it, and a\n * redefinition hidden in one would pass unseen), a cross-reference entry placing an object in one, and a redefinition\n * whose previous definition the original keeps only in a compressed object stream. Admitted without inspecting what it\n * draws: a new appearance stream (`/Type /XObject /Subtype /Form`), which renders only inside its own widget's\n * rectangle and is what every vendor adds to show a signature. A \"shadow\" drawn in a signature widget is therefore not\n * detected; that is this analysis's stated residual. A vendor whose updates this refuses leaves the request open, never\n * SIGNED.\n *\n * spec-cite: ISO 32000-1:2008 §7.5.6 (incremental updates), §12.8.1 (signature dictionary: `ByteRange`, `Contents`,\n * `SubFilter`, `M`) and ETSI EN 319 142-1 §5.4 (the DSS dictionary); paraphrased from the structure they define, not\n * quoted.\n */\nimport { createHash } from 'node:crypto';\nimport { inflateSync } from 'node:zlib';\n\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n/** Why a signed PDF's structure was refused. Stable codes: a REJECTED verdict carries one. */\nexport enum PdfSignatureStructureRefusal {\n  /** No signature dictionary with a well-formed byte range was found. */\n  NO_SIGNATURE = 'no_signature',\n  /** A byte range does not start at 0, runs past the file, or its gap is not exactly the `/Contents` hex string. */\n  MALFORMED_BYTE_RANGE = 'malformed_byte_range',\n  /** Bytes follow the last signature and are not a permitted DSS update. */\n  UNSIGNED_BYTES_AFTER_LAST_SIGNATURE = 'unsigned_bytes_after_last_signature',\n  /** No prefix of the file ending at a `%%EOF` hashes to the bytes sent. */\n  ORIGINAL_NOT_A_PREFIX = 'original_not_a_prefix',\n  /** The appended bytes change the document beyond what signing and validation data add. */\n  NOT_A_PERMITTED_CHANGE = 'not_a_permitted_change',\n  /** The appended bytes cannot be analysed (an object stream, a redefinition of a compressed object, an unreadable object). */\n  UNANALYSABLE_UPDATE = 'unanalysable_update',\n}\n\n/** One signature found in the file. */\nexport interface PdfSignatureField {\n  /** `[0, a, b, c]` as declared. */\n  readonly byteRange: readonly [number, number, number, number];\n  /** The DER of the CMS signature: the `/Contents` hex decoded, its zero padding left for the CMS parser to end on. */\n  readonly contents: Uint8Array;\n  /** The signature dictionary's `/SubFilter` name, without the slash. */\n  readonly subFilter: string | undefined;\n  /** The signing time the dictionary's `/M` CLAIMS. The vendor's word, never proof. */\n  readonly claimedSigningTime: Date | undefined;\n  /** The offset just past the last byte this signature covers. */\n  readonly coveredEnd: number;\n}\n\n/** The SubFilters a PAdES / PDF signature validated here may declare: CMS detached signatures. */\nexport const PDF_ACCEPTED_SIGNATURE_SUBFILTERS: ReadonlySet<string> = new Set(['adbe.pkcs7.detached', 'ETSI.CAdES.detached']);\n\nexport type PdfSignatureStructure =\n  | {\n    readonly ok: true;\n    /** The signatures, in the order they cover the file (the first covers the least). */\n    readonly signatures: readonly PdfSignatureField[];\n    /** The length of the original bytes the file starts with. */\n    readonly originalLength: number;\n  }\n  | { readonly ok: false; readonly refusal: PdfSignatureStructureRefusal; readonly reason: string };\n\n/** Read a signed PDF's structure against the hash of the bytes sent (see the module header). Never throws. */\nexport function analysePdfSignatureStructure(file: Uint8Array, originalContentSha256: string): PdfSignatureStructure {\n  try {\n    return analyse(file, originalContentSha256);\n  } catch (error) {\n    return { ok: false, refusal: PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, reason: `The file could not be read: ${describeCaughtError(error)}` };\n  }\n}\n\nfunction refuse(refusal: PdfSignatureStructureRefusal, reason: string): PdfSignatureStructure {\n  return { ok: false, refusal, reason };\n}\n\nfunction analyse(file: Uint8Array, originalContentSha256: string): PdfSignatureStructure {\n  // latin1: one character per byte, so every string offset is a byte offset.\n  const text = Buffer.from(file.buffer, file.byteOffset, file.byteLength).toString('latin1');\n  const signatures: PdfSignatureField[] = [];\n  const byteRangePattern = /\\/ByteRange\\s*\\[\\s*(\\d+)\\s+(\\d+)\\s+(\\d+)\\s+(\\d+)\\s*\\]/g;\n  for (let match = byteRangePattern.exec(text); match; match = byteRangePattern.exec(text)) {\n    const [start, firstLength, secondStart, secondLength] = match.slice(1, 5).map((value) => Number(value)) as [number, number, number, number];\n    if (start !== 0 || firstLength <= 0 || secondStart <= firstLength || secondStart + secondLength > file.byteLength) {\n      return refuse(PdfSignatureStructureRefusal.MALFORMED_BYTE_RANGE, `A signature's byte range [${start} ${firstLength} ${secondStart} ${secondLength}] does not cover the file from its start within its length.`);\n    }\n    const gap = text.slice(firstLength, secondStart);\n    if (!/^<[0-9A-Fa-f\\s]*>$/.test(gap)) {\n      return refuse(PdfSignatureStructureRefusal.MALFORMED_BYTE_RANGE, `A signature's byte range leaves out bytes ${firstLength}–${secondStart} that are not its /Contents hex string.`);\n    }\n    // The dictionary the byte range sits in must be the one whose /Contents is the gap.\n    const objectStart = text.lastIndexOf(' obj', match.index);\n    const objectEnd = text.indexOf('endobj', match.index);\n    if (objectStart < 0 || objectEnd < 0 || firstLength < objectStart || secondStart > objectEnd) {\n      return refuse(PdfSignatureStructureRefusal.MALFORMED_BYTE_RANGE, 'A signature\\'s byte range does not leave out the /Contents of its own signature dictionary.');\n    }\n    const dictionary = text.slice(objectStart, firstLength) + text.slice(secondStart, objectEnd);\n    const hex = gap.slice(1, -1).replace(/\\s+/g, '');\n    signatures.push({\n      byteRange: [start, firstLength, secondStart, secondLength],\n      contents: new Uint8Array(Buffer.from(hex.length % 2 === 0 ? hex : `${hex}0`, 'hex')),\n      subFilter: /\\/SubFilter\\s*\\/([^\\s/<>[\\]()]+)/.exec(dictionary)?.[1],\n      claimedSigningTime: parsePdfDate(/\\/M\\s*\\((D:[^)]*)\\)/.exec(dictionary)?.[1]),\n      coveredEnd: secondStart + secondLength,\n    });\n  }\n  if (signatures.length === 0) return refuse(PdfSignatureStructureRefusal.NO_SIGNATURE, 'The file carries no signature.');\n  signatures.sort((first, second) => first.coveredEnd - second.coveredEnd);\n\n  // The bytes sent, as a prefix ending at one of their %%EOF markers.\n  const firstSignatureStart = Math.min(...signatures.map((signature) => signature.byteRange[1]));\n  const originalLength = originalPrefixLength(file, text, firstSignatureStart, originalContentSha256);\n  if (originalLength === undefined) {\n    return refuse(PdfSignatureStructureRefusal.ORIGINAL_NOT_A_PREFIX, 'The signed file does not start with the bytes that were sent: the vendor did not sign them as an incremental update.');\n  }\n\n  const lastCovered = signatures[signatures.length - 1]!.coveredEnd;\n  const changes = analyseAppendedRevisions(text, originalLength, signatures, lastCovered);\n  if (changes) return changes;\n  return { ok: true, signatures, originalLength };\n}\n\n/**\n * The length of the prefix that hashes to the bytes sent: an offset just past a `%%EOF` marker (and its end-of-line, when\n * the original ended with one), before the first signature.\n */\nfunction originalPrefixLength(file: Uint8Array, text: string, before: number, sha256: string): number | undefined {\n  for (let index = text.indexOf('%%EOF'); index >= 0 && index < before; index = text.indexOf('%%EOF', index + 1)) {\n    const end = index + 5;\n    const candidates = [end];\n    if (text[end] === '\\r' && text[end + 1] === '\\n') candidates.push(end + 2);\n    else if (text[end] === '\\n' || text[end] === '\\r') candidates.push(end + 1);\n    for (const length of candidates) {\n      if (length > before) continue;\n      if (createHash('sha256').update(file.subarray(0, length)).digest('hex') === sha256) return length;\n    }\n  }\n  return undefined;\n}\n\n/** One indirect object as written in the bytes. */\ninterface PdfIndirectObject {\n  readonly number: number;\n  readonly generation: number;\n  /** The offset of the object's number: where a cross-reference entry must point. */\n  readonly offset: number;\n  /** The object's value up to `stream` or `endobj`: a dictionary, an array, or a simple value. */\n  readonly value: string;\n  readonly isStream: boolean;\n  /** A stream's data, as written (undecoded). */\n  readonly streamData?: string;\n}\n\n/** Where a cross-reference entry says an object is (ISO 32000-1 §7.5.4, §7.5.8.3). */\nenum PdfCrossReferenceEntryKind {\n  /** In use, its definition at the entry's byte offset. */\n  IN_USE = 'in_use',\n  /** Free: the object is deleted. */\n  FREE = 'free',\n  /** Stored inside an object stream (refused: the analysis does not read object streams). */\n  COMPRESSED = 'compressed',\n}\n\n/** A cross-reference entry an appended section declares. */\ninterface PdfCrossReferenceEntry {\n  readonly number: number;\n  readonly generation: number;\n  readonly kind: PdfCrossReferenceEntryKind;\n  readonly offset: number;\n}\n\n/** What the strict walk of the appended bytes found. */\ninterface PdfAppendedRegion {\n  readonly objects: readonly PdfIndirectObject[];\n  readonly crossReferences: readonly PdfCrossReferenceEntry[];\n  /** Every trailer dictionary: a classic `trailer`, or a cross-reference stream's own dictionary. */\n  readonly trailers: ReadonlyArray<{ readonly entries: Map<string, string>; readonly sectionOffset: number }>;\n  /** The offset of every cross-reference section walked: an `xref` keyword, or a cross-reference stream's object. */\n  readonly sectionOffsets: readonly number[];\n  /** Every `startxref` value, in order. */\n  readonly startxrefValues: readonly number[];\n}\n\n/** Thrown inside the walk; turned into an UNANALYSABLE refusal. */\nclass UnanalysableUpdate extends Error {}\n\n/**\n * Walk the bytes after the original STRICTLY, the way a reader meets them: indirect objects (each closed by `endobj`,\n * a stream's data delimited by its `/Length`), cross-reference sections, trailers, `startxref` and comments. Anything else\n * is refused, so no object can hide inside another's bytes (an object left without `endobj`, data between objects).\n */\nfunction walkAppendedRegion(text: string, from: number): PdfAppendedRegion {\n  const objects: PdfIndirectObject[] = [];\n  const crossReferences: PdfCrossReferenceEntry[] = [];\n  const trailers: Array<{ entries: Map<string, string>; sectionOffset: number }> = [];\n  const sectionOffsets: number[] = [];\n  const startxrefValues: number[] = [];\n  let lastTableOffset = -1;\n  const tokens = new PdfTokenizer(text, from, text.length);\n  for (;;) {\n    tokens.skipWhitespace();\n    if (tokens.position >= text.length) break;\n    const at = tokens.position;\n    const header = /^(\\d+)\\s+(\\d+)\\s+obj\\b/.exec(text.slice(at, at + 40));\n    if (header) {\n      tokens.position = at + header[0].length;\n      const valueStart = tokens.position;\n      if (tokens.readValue() === undefined) throw new UnanalysableUpdate(`object ${header[1]} at ${at} has no readable value`);\n      const value = text.slice(valueStart, tokens.position).trim();\n      tokens.skipWhitespace();\n      let isStream = false;\n      let streamData: string | undefined;\n      if (text.startsWith('stream', tokens.position)) {\n        isStream = true;\n        let dataStart = tokens.position + 'stream'.length;\n        if (text[dataStart] === '\\r' && text[dataStart + 1] === '\\n') dataStart += 2;\n        else if (text[dataStart] === '\\n') dataStart += 1;\n        else throw new UnanalysableUpdate(`object ${header[1]}: 'stream' is not followed by an end of line`);\n        // Stated residual: a stream's data is not searched for text shaped like an object or a section. While a reader\n        // follows the cross-reference sections (every one checked below) such text is inert; a reader that rebuilds a\n        // damaged table by scanning the file could pick it up. Refusing on a pattern would refuse genuine DER data by chance.\n        const length = streamLengthOf(text, parseDictionaryOrUndefined(value), from);\n        streamData = text.slice(dataStart, dataStart + length);\n        tokens.position = dataStart + length;\n        tokens.skipWhitespace();\n        if (!text.startsWith('endstream', tokens.position)) throw new UnanalysableUpdate(`object ${header[1]}: its stream does not end where its /Length says`);\n        tokens.position += 'endstream'.length;\n        tokens.skipWhitespace();\n      }\n      if (!text.startsWith('endobj', tokens.position)) throw new UnanalysableUpdate(`object ${header[1]} at ${at} is not closed by endobj`);\n      tokens.position += 'endobj'.length;\n      const object: PdfIndirectObject = { number: Number(header[1]), generation: Number(header[2]), offset: at, value, isStream, ...(streamData !== undefined ? { streamData } : {}) };\n      objects.push(object);\n      const dictionary = parseDictionaryOrUndefined(value);\n      if (dictionary?.get('/Type') === '/XRef') {\n        if (!isStream || streamData === undefined) throw new UnanalysableUpdate(`object ${header[1]} is a cross-reference stream without data`);\n        crossReferences.push(...crossReferenceStreamEntries(dictionary, streamData));\n        trailers.push({ entries: dictionary, sectionOffset: at });\n        sectionOffsets.push(at);\n      }\n      continue;\n    }\n    if (text.startsWith('xref', at)) {\n      tokens.position = at + 'xref'.length;\n      crossReferences.push(...readCrossReferenceTable(text, tokens));\n      sectionOffsets.push(at);\n      lastTableOffset = at;\n      continue;\n    }\n    if (text.startsWith('trailer', at)) {\n      tokens.position = at + 'trailer'.length;\n      const entries = tokens.readDictionaryEntries();\n      if (!entries) throw new UnanalysableUpdate(`the trailer at ${at} is not a dictionary`);\n      if (lastTableOffset < 0) throw new UnanalysableUpdate(`the trailer at ${at} follows no cross-reference table`);\n      trailers.push({ entries, sectionOffset: lastTableOffset });\n      lastTableOffset = -1;\n      continue;\n    }\n    if (text.startsWith('startxref', at)) {\n      tokens.position = at + 'startxref'.length;\n      tokens.skipWhitespace();\n      const number = /^\\d+/.exec(text.slice(tokens.position, tokens.position + 20));\n      if (!number) throw new UnanalysableUpdate(`startxref at ${at} names no offset`);\n      startxrefValues.push(Number(number[0]));\n      tokens.position += number[0].length;\n      continue;\n    }\n    throw new UnanalysableUpdate(`bytes at ${at} are neither an object, a cross-reference section nor a trailer`);\n  }\n  return { objects, crossReferences, trailers, sectionOffsets, startxrefValues };\n}\n\n/** A stream's `/Length`: direct, or an indirect integer object defined in the appended bytes. */\nfunction streamLengthOf(text: string, dictionary: Map<string, string> | undefined, from: number): number {\n  const raw = dictionary?.get('/Length');\n  if (raw === undefined) throw new UnanalysableUpdate('a stream declares no /Length');\n  if (/^\\d+$/.test(raw)) return Number(raw);\n  const reference = /^(\\d+) (\\d+) R$/.exec(raw);\n  if (!reference) throw new UnanalysableUpdate(`a stream's /Length \"${raw}\" cannot be read`);\n  const definition = new RegExp(`(?:^|[\\\\r\\\\n\\\\s])${reference[1]}\\\\s+${reference[2]}\\\\s+obj\\\\s+(\\\\d+)\\\\s+endobj`).exec(text.slice(from));\n  if (!definition) throw new UnanalysableUpdate(`a stream's /Length ${raw} is not an integer object of the update`);\n  return Number(definition[1]);\n}\n\n/** A classic cross-reference table: subsections of `start count`, then 20-byte entries, up to `trailer`. */\nfunction readCrossReferenceTable(text: string, tokens: PdfTokenizer): PdfCrossReferenceEntry[] {\n  const entries: PdfCrossReferenceEntry[] = [];\n  for (;;) {\n    tokens.skipWhitespace();\n    if (text.startsWith('trailer', tokens.position)) return entries;\n    const subsection = /^(\\d+)\\s+(\\d+)[ \\t]*\\r?\\n/.exec(text.slice(tokens.position, tokens.position + 40));\n    if (!subsection) throw new UnanalysableUpdate(`a cross-reference subsection at ${tokens.position} cannot be read`);\n    tokens.position += subsection[0].length;\n    const start = Number(subsection[1]);\n    const count = Number(subsection[2]);\n    for (let index = 0; index < count; index += 1) {\n      const entry = /^(\\d{10}) (\\d{5}) ([nf])\\s{0,2}/.exec(text.slice(tokens.position, tokens.position + 22));\n      if (!entry) throw new UnanalysableUpdate(`cross-reference entry ${start + index} cannot be read`);\n      tokens.position += entry[0].length;\n      entries.push({ number: start + index, generation: Number(entry[2]), kind: entry[3] === 'n' ? PdfCrossReferenceEntryKind.IN_USE : PdfCrossReferenceEntryKind.FREE, offset: Number(entry[1]) });\n    }\n  }\n}\n\n/** The entries of a cross-reference stream (FlateDecode with or without a PNG predictor, or no filter). */\nfunction crossReferenceStreamEntries(dictionary: Map<string, string>, data: string): PdfCrossReferenceEntry[] {\n  const widths = (/^\\[\\s*(\\d+)\\s+(\\d+)\\s+(\\d+)\\s*\\]$/.exec(dictionary.get('/W') ?? '') ?? []).slice(1).map(Number);\n  if (widths.length !== 3) throw new UnanalysableUpdate('a cross-reference stream has no readable /W');\n  const filter = dictionary.get('/Filter');\n  let bytes: Buffer = Buffer.from(data, 'latin1');\n  if (filter === '/FlateDecode' || filter === '[/FlateDecode]' || filter === '[ /FlateDecode ]') bytes = inflateSync(bytes);\n  else if (filter !== undefined) throw new UnanalysableUpdate(`a cross-reference stream uses ${filter}`);\n  const rowLength = widths[0]! + widths[1]! + widths[2]!;\n  const parameters = parseDictionaryOrUndefined(dictionary.get('/DecodeParms') ?? '');\n  const predictor = Number(parameters?.get('/Predictor') ?? 1);\n  if (predictor >= 10) bytes = undoPngPredictor(bytes, Number(parameters?.get('/Columns') ?? rowLength));\n  else if (predictor !== 1) throw new UnanalysableUpdate(`a cross-reference stream uses predictor ${predictor}`);\n  const size = Number(dictionary.get('/Size'));\n  const index = (/^\\[([\\d\\s]+)\\]$/.exec(dictionary.get('/Index') ?? '')?.[1]?.trim().split(/\\s+/).map(Number)) ?? [0, size];\n  const entries: PdfCrossReferenceEntry[] = [];\n  let row = 0;\n  for (let pair = 0; pair + 1 < index.length; pair += 2) {\n    for (let number = index[pair]!; number < index[pair]! + index[pair + 1]!; number += 1, row += 1) {\n      const at = row * rowLength;\n      if (at + rowLength > bytes.length) throw new UnanalysableUpdate('a cross-reference stream is shorter than its /Index');\n      const field = (start: number, width: number, fallback: number) => {\n        if (width === 0) return fallback;\n        let value = 0;\n        for (let offset = 0; offset < width; offset += 1) value = value * 256 + bytes[at + start + offset]!;\n        return value;\n      };\n      const type = field(0, widths[0]!, 1);\n      const second = field(widths[0]!, widths[1]!, 0);\n      const third = field(widths[0]! + widths[1]!, widths[2]!, 0);\n      const kind = type === 1 ? PdfCrossReferenceEntryKind.IN_USE : type === 0 ? PdfCrossReferenceEntryKind.FREE : PdfCrossReferenceEntryKind.COMPRESSED;\n      entries.push({ number, generation: type === 1 ? third : 0, kind, offset: second });\n    }\n  }\n  return entries;\n}\n\n/** Undo the PNG predictors of a FlateDecode stream (ISO 32000-1 §7.4.4.4): one filter-type byte per row. */\nfunction undoPngPredictor(bytes: Buffer, columns: number): Buffer {\n  const rows: Buffer[] = [];\n  let previous = Buffer.alloc(columns);\n  for (let at = 0; at + columns < bytes.length + 1 && at < bytes.length; at += columns + 1) {\n    const type = bytes[at]!;\n    const row = Buffer.from(bytes.subarray(at + 1, at + 1 + columns));\n    for (let column = 0; column < columns; column += 1) {\n      const left = column > 0 ? row[column - 1]! : 0;\n      const up = previous[column]!;\n      const upLeft = column > 0 ? previous[column - 1]! : 0;\n      if (type === 1) row[column] = (row[column]! + left) & 0xff;\n      else if (type === 2) row[column] = (row[column]! + up) & 0xff;\n      else if (type === 3) row[column] = (row[column]! + Math.floor((left + up) / 2)) & 0xff;\n      else if (type === 4) {\n        const estimate = left + up - upLeft;\n        const [pa, pb, pc] = [Math.abs(estimate - left), Math.abs(estimate - up), Math.abs(estimate - upLeft)];\n        row[column] = (row[column]! + (pa <= pb && pa <= pc ? left : pb <= pc ? up : upLeft)) & 0xff;\n      } else if (type !== 0) throw new UnanalysableUpdate(`a cross-reference stream row uses PNG filter ${type}`);\n    }\n    rows.push(row);\n    previous = row;\n  }\n  return Buffer.concat(rows);\n}\n\n/**\n * The appended revisions, checked for permitted changes (module header, question 3). Answers a refusal, or `undefined`\n * when every appended object is a signing or validation addition and nothing unsigned follows the last signature but a\n * DSS update.\n */\nfunction analyseAppendedRevisions(text: string, originalLength: number, signatures: readonly PdfSignatureField[], lastCovered: number): PdfSignatureStructure | undefined {\n  const original = text.slice(0, originalLength);\n  const originalSize = lastNumberOf(original, /\\/Size\\s+(\\d+)/g);\n  const originalRoot = lastMatchOf(original, /\\/Root\\s+(\\d+\\s+\\d+\\s+R)/g);\n  const originalEncrypt = lastMatchOf(original, /\\/Encrypt\\s+(\\d+\\s+\\d+\\s+R)/g);\n  if (originalSize === undefined || originalRoot === undefined) {\n    return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, 'The bytes sent declare no trailer /Size or /Root, so what was appended to them cannot be told apart.');\n  }\n  void signatures;\n  let region: PdfAppendedRegion;\n  try {\n    region = walkAppendedRegion(text, originalLength);\n  } catch (error) {\n    return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `The bytes after the original cannot be read: ${describeCaughtError(error)}`);\n  }\n\n  // The trailers appended keep the catalog and the encryption the bytes sent named.\n  // A reader finds the cross-reference sections through `startxref`, `/Prev` and `/XRefStm`: each must name a section\n  // the walk READ (or, for the chain into the original, the original's own), so no section hidden in a stream's data, or\n  // anywhere else the walk did not judge, can be the one a reader follows.\n  // Into the original, a /Prev names the original's LAST section only: one naming an earlier section would make a reader\n  // skip the original's own later updates, so render a version of the document other than the one sent.\n  const walkedSections = new Set(region.sectionOffsets);\n  const originalStartxrefs = allMatchesOf(original, /startxref\\s+(\\d+)/g).map(Number);\n  const originalLastSection = originalStartxrefs[originalStartxrefs.length - 1];\n  const originalCrossReferenceStreams = new Set(allMatchesOf(original, /\\/XRefStm\\s+(\\d+)/g).map(Number));\n  if (region.startxrefValues.some((value) => !walkedSections.has(value))) {\n    return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended startxref names a cross-reference section the analysis did not read.');\n  }\n  const lastSection = region.sectionOffsets[region.sectionOffsets.length - 1];\n  const lastStartxref = region.startxrefValues[region.startxrefValues.length - 1];\n  if (region.sectionOffsets.length > 0 && lastStartxref !== lastSection) {\n    return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'The file\\'s last startxref does not name its last cross-reference section.');\n  }\n  // Each appended section chains to the one immediately before it (the first to the original's last): a /Prev that skips\n  // a revision would show a reader the document without, say, the signature that revision added. A hybrid file, whose\n  // cross-reference stream is reached through /XRefStm and carries no /Prev of its own, is refused by this too: stated,\n  // and fail-closed (the request stays open).\n  let expectedPrev = originalLastSection;\n  for (const { entries, sectionOffset } of region.trailers) {\n    // An incremental update chains to what it updates: a section without /Prev would hide the whole original from a reader.\n    if (entries.get('/Prev') === undefined || Number(entries.get('/Prev')) !== expectedPrev) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended cross-reference section does not chain to the revision it updates.');\n    }\n    expectedPrev = sectionOffset;\n    // A hybrid file's /XRefStm names a cross-reference stream: one the walk read, before this section, or the original's.\n    const xrefStream = entries.get('/XRefStm');\n    if (xrefStream !== undefined) {\n      const offset = Number(xrefStream);\n      const admitted = (walkedSections.has(offset) && offset < sectionOffset) || originalCrossReferenceStreams.has(offset);\n      if (!/^\\d+$/.test(xrefStream) || !admitted) {\n        return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended trailer\\'s /XRefStm names a cross-reference stream the analysis did not read.');\n      }\n    }\n  }\n  for (const { entries: trailer } of region.trailers) {\n    const root = trailer.get('/Root');\n    if (root === undefined || normalizeReference(root) !== normalizeReference(originalRoot)) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended trailer names another catalog than the bytes sent.');\n    }\n    const encrypt = trailer.get('/Encrypt');\n    if ((encrypt ?? '') !== (originalEncrypt ?? '') && !(encrypt && originalEncrypt && normalizeReference(encrypt) === normalizeReference(originalEncrypt))) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended trailer changes the document\\'s encryption.');\n    }\n  }\n\n  // Every cross-reference entry appended points at an object this walk read, by its number and generation: a reader\n  // finds objects through these entries, so none may point into another object's bytes or back into the bytes sent.\n  const objectAt = new Map(region.objects.map((object) => [object.offset, object]));\n  for (const entry of region.crossReferences) {\n    if (entry.kind === PdfCrossReferenceEntryKind.COMPRESSED) {\n      return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `Object ${entry.number} is placed in an object stream by an appended cross-reference stream.`);\n    }\n    if (entry.kind === PdfCrossReferenceEntryKind.FREE) {\n      if (entry.number !== 0 && (entry.number < originalSize || region.objects.some((object) => object.number === entry.number))) {\n        return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, `An appended cross-reference section frees object ${entry.number}.`);\n      }\n      continue;\n    }\n    const target = objectAt.get(entry.offset);\n    if (!target || target.number !== entry.number || target.generation !== entry.generation) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, `An appended cross-reference entry for object ${entry.number} does not point at that object's definition in the update.`);\n    }\n  }\n\n  const infoReference = lastMatchOf(original, /\\/Info\\s+(\\d+\\s+\\d+\\s+R)/g);\n  const rootNumber = Number(originalRoot.split(/\\s+/)[0]);\n  const infoNumber = infoReference ? Number(infoReference.split(/\\s+/)[0]) : undefined;\n  const growableArrays = growableArrayNumbers(original, region.objects);\n\n  for (const object of region.objects) {\n    const dictionary = parseDictionaryOrUndefined(object.value);\n    const type = dictionary?.get('/Type');\n    const afterLastSignature = object.offset >= lastCovered;\n    const previous = previousDefinition(text, object, originalLength, region.objects);\n    const existedBefore = object.number < originalSize || previous !== undefined;\n\n    if (existedBefore) {\n      // A redefinition, whatever it calls itself: judged against what it replaces.\n      if (!previous) {\n        return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `Object ${object.number} is redefined, and its previous definition is not a plain object the analysis can compare.`);\n      }\n      if (afterLastSignature) {\n        const refusal = object.number === rootNumber ? refusalOfCatalogChange(object, dictionary, previous, new Set(['/DSS'])) : `Object ${object.number} is changed after the last signature.`;\n        if (refusal) return refuse(PdfSignatureStructureRefusal.UNSIGNED_BYTES_AFTER_LAST_SIGNATURE, refusal);\n        continue;\n      }\n      const refusal = refusalOfRedefinition(object, dictionary, previous, { isCatalog: object.number === rootNumber, isInfo: object.number === infoNumber, growableArrays });\n      if (refusal) return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, refusal);\n      continue;\n    }\n\n    // A new object.\n    if (type === '/ObjStm') {\n      return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `Object ${object.number} is an object stream appended after the bytes sent; the objects in it cannot be checked.`);\n    }\n    if (type === '/XRef') continue;\n    if (afterLastSignature) {\n      if (!isDssAddition(object, dictionary)) {\n        return refuse(PdfSignatureStructureRefusal.UNSIGNED_BYTES_AFTER_LAST_SIGNATURE, `Object ${object.number}, after the last signature, is not a document security store update.`);\n      }\n      continue;\n    }\n    const refusal = refusalOfNewObject(object, dictionary);\n    if (refusal) return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, refusal);\n  }\n  return undefined;\n}\n\n/** The kinds of object signing and validation data add. Anything else new (a page, a free-text annotation) is refused. */\nconst NEW_OBJECT_TYPES: ReadonlySet<string> = new Set(['/Sig', '/DSS', '/VRI', '/XObject', '/Font', '/FontDescriptor', '/Annot', '/Encoding']);\nconst ANNOTATION_SUBTYPES_ADMITTED: ReadonlySet<string> = new Set(['/Widget']);\n/** Form keys that would change what the document shows or does when opened (XFA forms, regenerated appearances). */\nconst FORBIDDEN_FORM_KEYS: readonly string[] = ['/XFA', '/NeedAppearances'];\n\nfunction refusalOfNewObject(object: PdfIndirectObject, dictionary: Map<string, string> | undefined): string | undefined {\n  if (!dictionary) return undefined; // An array or a simple value: reachable only through a key the checks below admit.\n  const type = dictionary.get('/Type');\n  const subtype = dictionary.get('/Subtype');\n  if (type !== undefined && !NEW_OBJECT_TYPES.has(type)) return `Object ${object.number} adds a ${type} after the bytes sent.`;\n  if (type === '/XObject' && subtype !== '/Form') return `Object ${object.number} adds an image or other XObject, not an appearance.`;\n  if (type === '/Annot' || (subtype !== undefined && type === undefined && dictionary.has('/Rect'))) {\n    if (!subtype || !ANNOTATION_SUBTYPES_ADMITTED.has(subtype)) return `Object ${object.number} adds a ${subtype ?? 'untyped'} annotation, which can cover the document's content.`;\n  }\n  if (subtype === '/Widget' && dictionary.get('/FT') !== '/Sig' && !dictionary.has('/Parent')) {\n    return `Object ${object.number} adds a widget that is not a signature field.`;\n  }\n  // A form field that is not a signature field could change what the document shows when filled.\n  if (dictionary.has('/FT') && dictionary.get('/FT') !== '/Sig') return `Object ${object.number} adds a ${dictionary.get('/FT')} form field.`;\n  const forbidden = FORBIDDEN_FORM_KEYS.find((key) => dictionary.has(key));\n  if (forbidden) return `Object ${object.number} adds a form carrying ${forbidden}.`;\n  return undefined;\n}\n\n/** The keys a redefinition may change, per kind of object; every other key must keep its value. */\nconst CATALOG_CHANGEABLE_KEYS: ReadonlySet<string> = new Set(['/AcroForm', '/DSS']);\nconst PAGE_CHANGEABLE_KEYS: ReadonlySet<string> = new Set(['/Annots']);\nconst FORM_CHANGEABLE_KEYS: ReadonlySet<string> = new Set(['/Fields', '/SigFlags', '/DR', '/DA']);\n\nfunction refusalOfRedefinition(\n  object: PdfIndirectObject,\n  dictionary: Map<string, string> | undefined,\n  previous: PdfIndirectObject,\n  kind: { readonly isCatalog: boolean; readonly isInfo: boolean; readonly growableArrays: ReadonlySet<number> },\n): string | undefined {\n  const previousDictionary = parseDictionaryOrUndefined(previous.value);\n  // Document metadata, invisible on the page: the trailer's /Info dictionary, and an XMP stream that WAS one.\n  if (kind.isInfo && !object.isStream && !previous.isStream && dictionary && previousDictionary) return undefined;\n  if (object.isStream && previous.isStream && dictionary?.get('/Type') === '/Metadata' && previousDictionary?.get('/Type') === '/Metadata') return undefined;\n  if (object.isStream || previous.isStream) return `Object ${object.number}, a stream, is replaced after the bytes sent.`;\n  if (kind.isCatalog) return refusalOfCatalogChange(object, dictionary, previous, CATALOG_CHANGEABLE_KEYS);\n  if (!dictionary) {\n    // An indirect array may only grow, and only one a page's /Annots or a form's /Fields names.\n    const before = referencesIn(previous.value);\n    const after = referencesIn(object.value);\n    if (!kind.growableArrays.has(object.number) || !previous.value.startsWith('[') || !object.value.startsWith('[') || before.some((reference) => !after.includes(reference))) {\n      return `Object ${object.number} is replaced by a value that drops or changes what it held.`;\n    }\n    return undefined;\n  }\n  if (!previousDictionary) return `Object ${object.number} changes kind after the bytes sent.`;\n  const type = previousDictionary.get('/Type');\n  const changeable = type === '/Page' ? PAGE_CHANGEABLE_KEYS : previousDictionary.has('/Fields') ? FORM_CHANGEABLE_KEYS : undefined;\n  if (!changeable) return `Object ${object.number}${type ? ` (${type})` : ''} is changed after the bytes sent.`;\n  if (changeable === FORM_CHANGEABLE_KEYS) {\n    const forbidden = FORBIDDEN_FORM_KEYS.find((key) => dictionary.has(key));\n    if (forbidden) return `Object ${object.number}, the form, gains ${forbidden}.`;\n  }\n  return refusalOfChangedKeys(object, previousDictionary, dictionary, changeable, type);\n}\n\n/** A catalog redefinition: only `changeable` keys may differ, and an inline form may not gain XFA or regenerated appearances. */\nfunction refusalOfCatalogChange(object: PdfIndirectObject, dictionary: Map<string, string> | undefined, previous: PdfIndirectObject, changeable: ReadonlySet<string>): string | undefined {\n  const previousDictionary = parseDictionaryOrUndefined(previous.value);\n  if (object.isStream || !dictionary || !previousDictionary) return `Object ${object.number}, the catalog, changes kind.`;\n  const form = dictionary.get('/AcroForm');\n  const inlineForm = form?.startsWith('<<') ? parseDictionaryOrUndefined(form) : undefined;\n  const forbidden = inlineForm ? FORBIDDEN_FORM_KEYS.find((key) => inlineForm.has(key)) : undefined;\n  if (forbidden) return `The catalog's form gains ${forbidden}.`;\n  return refusalOfChangedKeys(object, previousDictionary, dictionary, changeable, '/Catalog');\n}\n\nfunction refusalOfChangedKeys(object: PdfIndirectObject, before: Map<string, string>, after: Map<string, string>, changeable: ReadonlySet<string>, type: string | undefined): string | undefined {\n  for (const key of new Set([...before.keys(), ...after.keys()])) {\n    if (changeable.has(key)) continue;\n    if (before.get(key) !== after.get(key)) return `Object ${object.number}${type ? ` (${type})` : ''} changes ${key} after the bytes sent.`;\n  }\n  return undefined;\n}\n\n/** Whether a NEW object appended after the last signature belongs to a document security store update. */\nfunction isDssAddition(object: PdfIndirectObject, dictionary: Map<string, string> | undefined): boolean {\n  if (!dictionary) return object.value.startsWith('[');\n  const type = dictionary.get('/Type');\n  if (type === '/DSS' || type === '/VRI') return true;\n  // The DSS's certificate, CRL and OCSP streams carry no type; an untyped dictionary or stream with no keys of a page,\n  // an annotation or a form is data the DSS references.\n  return type === undefined && !dictionary.has('/Subtype') && !dictionary.has('/FT') && !dictionary.has('/Rect') && !dictionary.has('/Contents');\n}\n\n/**\n * The definition `object` replaces: the last one before it in the update's walk, else the last plain one in the bytes sent\n * (`undefined` when the original keeps it only in a compressed object stream). By object NUMBER, whatever the generation:\n * a new generation of an object number is still a replacement of what that number held, and is judged as one.\n */\nfunction previousDefinition(text: string, object: PdfIndirectObject, originalLength: number, appended: readonly PdfIndirectObject[]): PdfIndirectObject | undefined {\n  let found: PdfIndirectObject | undefined;\n  for (const candidate of appended) {\n    if (candidate.offset >= object.offset) break;\n    if (candidate.number === object.number) found = candidate;\n  }\n  if (found) return found;\n  const pattern = new RegExp(`(?:^|[\\\\r\\\\n\\\\s])${object.number}\\\\s+\\\\d+\\\\s+obj\\\\b`, 'g');\n  for (let match = pattern.exec(text); match && match.index < originalLength; match = pattern.exec(text)) {\n    const offset = match.index + match[0].indexOf(String(object.number));\n    try {\n      const walked = walkOneObject(text, offset, originalLength);\n      if (walked) found = walked;\n    } catch {\n      // Not readable as a plain object here; an earlier or later definition may be.\n    }\n  }\n  return found;\n}\n\n/** One plain object at `offset` in the bytes sent, delimited the way the walk delimits appended ones. */\nfunction walkOneObject(text: string, offset: number, limit: number): PdfIndirectObject | undefined {\n  const header = /^(\\d+)\\s+(\\d+)\\s+obj\\b/.exec(text.slice(offset, offset + 40));\n  if (!header) return undefined;\n  const tokens = new PdfTokenizer(text, offset + header[0].length, limit);\n  const valueStart = tokens.position;\n  if (tokens.readValue() === undefined) return undefined;\n  const value = text.slice(valueStart, tokens.position).trim();\n  tokens.skipWhitespace();\n  const isStream = text.startsWith('stream', tokens.position);\n  return { number: Number(header[1]), generation: Number(header[2]), offset, value, isStream };\n}\n\n/**\n * The indirect arrays that may grow: those a PAGE's `/Annots` or a FORM's `/Fields` names, read from the original and\n * from the appended pages, catalog and forms (never from an arbitrary appended object, which could otherwise name any\n * array). An array the original names under any other key (a page's `/Contents`, `/Kids`) is never growable, whatever\n * else names it.\n */\nfunction growableArrayNumbers(original: string, appended: readonly PdfIndirectObject[]): ReadonlySet<number> {\n  const named = (text: string) => [...text.matchAll(/\\/(?:Annots|Fields)\\s+(\\d+)\\s+\\d+\\s+R/g)].map((match) => Number(match[1]));\n  const growable = new Set(named(original));\n  for (const object of appended) {\n    const dictionary = parseDictionaryOrUndefined(object.value);\n    if (dictionary && (dictionary.get('/Type') === '/Page' || dictionary.get('/Type') === '/Catalog' || (dictionary.has('/Fields') && !dictionary.has('/Type')))) {\n      for (const number of named(object.value)) growable.add(number);\n    }\n  }\n  // Every other reference of the original, under any key (a name may carry digits: `/CS0`) or as an element of an array.\n  for (const match of original.matchAll(/(\\/[^\\s/<>\\[\\]()]+\\s+)?(\\d+)\\s+\\d+\\s+R\\b/g)) {\n    const key = match[1]?.trim();\n    if (key !== '/Annots' && key !== '/Fields') growable.delete(Number(match[2]));\n  }\n  // The type filter above is defence in depth: an array the original references only through /Annots or /Fields is\n  // growable from the original already, and every other reference removes it here.\n  return growable;\n}\n\nfunction referencesIn(value: string): string[] {\n  return [...value.matchAll(/(\\d+)\\s+(\\d+)\\s+R/g)].map((match) => `${match[1]} ${match[2]} R`);\n}\n\nfunction normalizeReference(reference: string): string {\n  return reference.trim().split(/\\s+/).join(' ');\n}\n\nfunction lastNumberOf(text: string, pattern: RegExp): number | undefined {\n  const value = lastMatchOf(text, pattern);\n  return value === undefined ? undefined : Number(value);\n}\n\nfunction lastMatchOf(text: string, pattern: RegExp): string | undefined {\n  const all = allMatchesOf(text, pattern);\n  return all.length > 0 ? all[all.length - 1] : undefined;\n}\n\nfunction allMatchesOf(text: string, pattern: RegExp): string[] {\n  return [...text.matchAll(pattern)].map((match) => match[1]!);\n}\n\n/** A PDF date (`D:YYYYMMDDHHmmSSOHH'mm`) as an instant; `undefined` when it does not read. */\nexport function parsePdfDate(value: string | undefined): Date | undefined {\n  if (!value) return undefined;\n  const match = /^D:(\\d{4})(\\d{2})?(\\d{2})?(\\d{2})?(\\d{2})?(\\d{2})?(Z|[+-]\\d{2}'?\\d{2}'?)?/.exec(value);\n  if (!match) return undefined;\n  const [, year, month = '01', day = '01', hour = '00', minute = '00', second = '00', zone] = match;\n  let offset = 'Z';\n  if (zone && zone !== 'Z') {\n    const digits = zone.replace(/'/g, '');\n    offset = `${digits.slice(0, 3)}:${digits.slice(3, 5) || '00'}`;\n  }\n  const date = new Date(`${year}-${month}-${day}T${hour}:${minute}:${second}${offset}`);\n  return Number.isNaN(date.getTime()) ? undefined : date;\n}\n\n/**\n * A PDF dictionary's top-level keys and their values, each value normalized to single spaces so two definitions can be\n * compared. `undefined` when `value` is not a dictionary.\n */\nexport function parseDictionaryOrUndefined(value: string): Map<string, string> | undefined {\n  if (!value.startsWith('<<')) return undefined;\n  const tokens = new PdfTokenizer(value, 0, value.length);\n  const entries = tokens.readDictionaryEntries();\n  return entries;\n}\n\n/** A minimal PDF tokenizer: enough to delimit values (nested dictionaries, arrays, strings, references). */\nclass PdfTokenizer {\n  position: number;\n\n  constructor(private readonly text: string, from: number, private readonly end: number) {\n    this.position = from;\n  }\n\n  skipWhitespace(): void {\n    while (this.position < this.end) {\n      const character = this.text[this.position]!;\n      if (character === '%') {\n        while (this.position < this.end && this.text[this.position] !== '\\n' && this.text[this.position] !== '\\r') this.position += 1;\n        continue;\n      }\n      if (!/[\\s\\0]/.test(character)) return;\n      this.position += 1;\n    }\n  }\n\n  /** The dictionary at the cursor as key → normalized value; `undefined` when it is not one or is unterminated. */\n  readDictionaryEntries(): Map<string, string> | undefined {\n    this.skipWhitespace();\n    if (!this.text.startsWith('<<', this.position)) return undefined;\n    this.position += 2;\n    const entries = new Map<string, string>();\n    for (;;) {\n      this.skipWhitespace();\n      if (this.position >= this.end) return undefined;\n      if (this.text.startsWith('>>', this.position)) {\n        this.position += 2;\n        return entries;\n      }\n      const key = this.readName();\n      if (key === undefined) return undefined;\n      const start = this.position;\n      if (this.readValue() === undefined) return undefined;\n      entries.set(key, this.text.slice(start, this.position).trim().replace(/\\s+/g, ' '));\n    }\n  }\n\n  private readName(): string | undefined {\n    this.skipWhitespace();\n    if (this.text[this.position] !== '/') return undefined;\n    const start = this.position;\n    this.position += 1;\n    while (this.position < this.end && !/[\\s\\0/<>[\\]()%{}]/.test(this.text[this.position]!)) this.position += 1;\n    return this.text.slice(start, this.position);\n  }\n\n  /** Skip one value (an indirect reference counts as one). Answers `true`, or `undefined` when it does not delimit. */\n  readValue(): true | undefined {\n    this.skipWhitespace();\n    if (this.position >= this.end) return undefined;\n    const character = this.text[this.position]!;\n    if (this.text.startsWith('<<', this.position)) {\n      return this.readDictionaryEntries() === undefined ? undefined : true;\n    }\n    if (character === '<') {\n      const close = this.text.indexOf('>', this.position);\n      if (close < 0 || close >= this.end) return undefined;\n      this.position = close + 1;\n      return true;\n    }\n    if (character === '[') {\n      this.position += 1;\n      for (;;) {\n        this.skipWhitespace();\n        if (this.position >= this.end) return undefined;\n        if (this.text[this.position] === ']') {\n          this.position += 1;\n          return true;\n        }\n        if (this.readValue() === undefined) return undefined;\n      }\n    }\n    if (character === '(') return this.readLiteralString();\n    if (character === '/') return this.readName() === undefined ? undefined : true;\n    // A number, which may begin an indirect reference `N G R`, or a keyword.\n    const number = /^[+-]?(\\d+\\.?\\d*|\\.\\d+)/.exec(this.text.slice(this.position, Math.min(this.end, this.position + 32)));\n    if (number) {\n      this.position += number[0].length;\n      const reference = /^\\s+\\d+\\s+R(?![A-Za-z])/.exec(this.text.slice(this.position, Math.min(this.end, this.position + 32)));\n      if (reference && /^\\d+$/.test(number[0])) this.position += reference[0].length;\n      return true;\n    }\n    const keyword = /^[A-Za-z]+/.exec(this.text.slice(this.position, Math.min(this.end, this.position + 16)));\n    if (keyword) {\n      this.position += keyword[0].length;\n      return true;\n    }\n    return undefined;\n  }\n\n  private readLiteralString(): true | undefined {\n    let depth = 0;\n    while (this.position < this.end) {\n      const character = this.text[this.position]!;\n      if (character === '\\\\') {\n        this.position += 2;\n        continue;\n      }\n      if (character === '(') depth += 1;\n      if (character === ')') {\n        depth -= 1;\n        if (depth === 0) {\n          this.position += 1;\n          return true;\n        }\n      }\n      this.position += 1;\n    }\n    return undefined;\n  }\n}\n"]}
+{"version":3,"file":"pdf-signature-structure.backend.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/pdf-signature-structure.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAEnH,8FAA8F;AAC9F,MAAM,CAAN,IAAY,4BAaX;AAbD,WAAY,4BAA4B;IACtC,uEAAuE;IACvE,6DAA6B,CAAA;IAC7B,kHAAkH;IAClH,6EAA6C,CAAA;IAC7C,0EAA0E;IAC1E,2GAA2E,CAAA;IAC3E,0EAA0E;IAC1E,+EAA+C,CAAA;IAC/C,0FAA0F;IAC1F,iFAAiD,CAAA;IACjD,6HAA6H;IAC7H,2EAA2C,CAAA;AAC7C,CAAC,EAbW,4BAA4B,KAA5B,4BAA4B,QAavC;AAgBD,kGAAkG;AAClG,MAAM,CAAC,MAAM,iCAAiC,GAAwB,IAAI,GAAG,CAAC,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAY9H,8GAA8G;AAC9G,MAAM,UAAU,4BAA4B,CAAC,IAAgB,EAAE,qBAA6B;IAC1F,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,CAAC,mBAAmB,EAAE,MAAM,EAAE,+BAA+B,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACvJ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,OAAqC,EAAE,MAAc;IACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,IAAgB,EAAE,qBAA6B;IAC9D,2EAA2E;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,wDAAwD,CAAC;IAClF,KAAK,IAAI,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzF,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAqC,CAAC;QAC5I,IAAI,KAAK,KAAK,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,WAAW,IAAI,WAAW,IAAI,WAAW,GAAG,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAClH,OAAO,MAAM,CAAC,4BAA4B,CAAC,oBAAoB,EAAE,6BAA6B,KAAK,IAAI,WAAW,IAAI,WAAW,IAAI,YAAY,6DAA6D,CAAC,CAAC;QAClN,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,4BAA4B,CAAC,oBAAoB,EAAE,6CAA6C,WAAW,IAAI,WAAW,yCAAyC,CAAC,CAAC;QACrL,CAAC;QACD,oFAAoF;QACpF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,WAAW,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,WAAW,GAAG,WAAW,IAAI,WAAW,GAAG,SAAS,EAAE,CAAC;YAC7F,OAAO,MAAM,CAAC,4BAA4B,CAAC,oBAAoB,EAAE,6FAA6F,CAAC,CAAC;QAClK,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC;YAC1D,QAAQ,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;YACpF,SAAS,EAAE,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,kBAAkB,EAAE,YAAY,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7E,UAAU,EAAE,WAAW,GAAG,YAAY;SACvC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,YAAY,EAAE,gCAAgC,CAAC,CAAC;IACxH,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEzE,oEAAoE;IACpE,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,4BAA4B,CAAC,qBAAqB,EAAE,sHAAsH,CAAC,CAAC;IAC5L,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,UAAU,CAAC;IAClE,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACxF,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAgB,EAAE,IAAY,EAAE,MAAc,EAAE,MAAc;IAC1F,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/G,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;aACtE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,IAAI,MAAM,GAAG,MAAM;gBAAE,SAAS;YAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC;QACpG,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAeD,sFAAsF;AACtF,IAAK,0BAOJ;AAPD,WAAK,0BAA0B;IAC7B,yDAAyD;IACzD,+CAAiB,CAAA;IACjB,mCAAmC;IACnC,2CAAa,CAAA;IACb,2FAA2F;IAC3F,uDAAyB,CAAA;AAC3B,CAAC,EAPI,0BAA0B,KAA1B,0BAA0B,QAO9B;AAsBD,mEAAmE;AACnE,MAAM,kBAAmB,SAAQ,KAAK;CAAG;AAEzC;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,eAAe,GAA6B,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAmE,EAAE,CAAC;IACpF,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,SAAS,CAAC;QACR,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM;QAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,SAAS;gBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;YACzH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,UAA8B,CAAC;YACnC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/C,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,SAAS,GAAG,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAClD,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI;oBAAE,SAAS,IAAI,CAAC,CAAC;qBACxE,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;oBAAE,SAAS,IAAI,CAAC,CAAC;;oBAC7C,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC;gBACrG,+GAA+G;gBAC/G,8GAA8G;gBAC9G,sHAAsH;gBACtH,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC7E,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;gBACvD,MAAM,CAAC,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;gBACrC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;gBACxJ,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC;gBACtC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;YACtI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC;YACnC,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACjL,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;gBACxI,eAAe,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC1D,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;YACrC,eAAe,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/D,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,eAAe,GAAG,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;YACvF,IAAI,eAAe,GAAG,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;YAC/G,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;YAC3D,eAAe,GAAG,CAAC,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC;YAC1C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;YAChF,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACpC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE,iEAAiE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;AACjF,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc,CAAC,IAAY,EAAE,UAA2C,EAAE,IAAY;IAC7F,MAAM,GAAG,GAAG,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,GAAG,kBAAkB,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,oBAAoB,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvI,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,GAAG,yCAAyC,CAAC,CAAC;IAClH,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,4GAA4G;AAC5G,SAAS,uBAAuB,CAAC,IAAY,EAAE,MAAoB;IACjE,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,SAAS,CAAC;QACR,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAChE,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,MAAM,CAAC,QAAQ,iBAAiB,CAAC,CAAC;QACnH,MAAM,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;YACxG,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,KAAK,GAAG,KAAK,iBAAiB,CAAC,CAAC;YAClG,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChM,CAAC;IACH,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,SAAS,2BAA2B,CAAC,UAA+B,EAAE,IAAY;IAChF,MAAM,MAAM,GAAG,CAAC,mCAAmC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,KAAK,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,kBAAkB;QAAE,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;SACrH,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;IACvG,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,MAAM,CAAC,CAAC,CAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACvD,MAAM,UAAU,GAAG,0BAA0B,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,SAAS,IAAI,EAAE;QAAE,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;SAClG,IAAI,SAAS,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1H,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACtD,KAAK,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAE,EAAE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAE,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAE,EAAE,MAAM,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAChG,MAAM,EAAE,GAAG,GAAG,GAAG,SAAS,CAAC;YAC3B,IAAI,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,CAAC,CAAC;YACvH,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,QAAgB,EAAE,EAAE;gBAC/D,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,QAAQ,CAAC;gBACjC,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,CAAC;oBAAE,KAAK,GAAG,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,EAAE,GAAG,KAAK,GAAG,MAAM,CAAE,CAAC;gBACpG,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,GAAG,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,UAAU,CAAC;YACnJ,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4GAA4G;AAC5G,SAAS,gBAAgB,CAAC,KAAa,EAAE,OAAe;IACtD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QAClE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,IAAI,IAAI,KAAK,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;iBACtD,IAAI,IAAI,KAAK,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;iBACzD,IAAI,IAAI,KAAK,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;iBAClF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC;gBACpC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC;gBACvG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;YAC/F,CAAC;iBAAM,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,kBAAkB,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,QAAQ,GAAG,GAAG,CAAC;IACjB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAAY,EAAE,cAAsB,EAAE,UAAwC,EAAE,WAAmB;IACnI,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;IAC9E,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,sGAAsG,CAAC,CAAC;IAC1K,CAAC;IACD,KAAK,UAAU,CAAC;IAChB,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,gDAAgD,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChJ,CAAC;IAED,kFAAkF;IAClF,oHAAoH;IACpH,uHAAuH;IACvH,yEAAyE;IACzE,uHAAuH;IACvH,sGAAsG;IACtG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,kBAAkB,GAAG,YAAY,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,kFAAkF,CAAC,CAAC;IACzJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,4EAA4E,CAAC,CAAC;IACnJ,CAAC;IACD,uHAAuH;IACvH,+FAA+F;IAC/F,EAAE;IACF,wHAAwH;IACxH,yHAAyH;IACzH,0GAA0G;IAC1G,yGAAyG;IACzG,uHAAuH;IACvH,oHAAoH;IACpH,kGAAkG;IAClG,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,IAAI,YAAY,GAAG,mBAAmB,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO;eACnD,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS;eACpD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,aAAa;eAC/D,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;QAC3F,IAAI,eAAe,EAAE,CAAC;YACpB,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,wHAAwH;QACxH,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,gFAAgF,CAAC,CAAC;QACvJ,CAAC;QACD,YAAY,GAAG,aAAa,CAAC;QAC7B,sHAAsH;QACtH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,aAAa,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,2FAA2F,CAAC,CAAC;YAClK,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,+GAA+G;QAC/G,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACnI,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,gEAAgE,CAAC,CAAC;QACvI,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,eAAe,IAAI,kBAAkB,CAAC,OAAO,CAAC,KAAK,kBAAkB,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACxJ,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,yDAAyD,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;IAED,kHAAkH;IAClH,kHAAkH;IAClH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,UAAU,EAAE,CAAC;YACzD,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,UAAU,KAAK,CAAC,MAAM,uEAAuE,CAAC,CAAC;QACjK,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC3H,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,oDAAoD,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1I,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACxF,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,gDAAgD,KAAK,CAAC,MAAM,4DAA4D,CAAC,CAAC;QAC/L,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAEtE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC;QACxD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAClF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,IAAI,QAAQ,KAAK,SAAS,CAAC;QAE7E,IAAI,aAAa,EAAE,CAAC;YAClB,6EAA6E;YAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,UAAU,MAAM,CAAC,MAAM,4FAA4F,CAAC,CAAC;YACvL,CAAC;YACD,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,uCAAuC,CAAC;gBACxL,IAAI,OAAO;oBAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;gBACtG,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;YACvK,IAAI,OAAO;gBAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,UAAU,MAAM,CAAC,MAAM,0FAA0F,CAAC,CAAC;QACrL,CAAC;QACD,IAAI,IAAI,KAAK,OAAO;YAAE,SAAS;QAC/B,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;gBACvC,OAAO,MAAM,CAAC,4BAA4B,CAAC,mCAAmC,EAAE,UAAU,MAAM,CAAC,MAAM,sEAAsE,CAAC,CAAC;YACjL,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvD,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0HAA0H;AAC1H,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/I,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/E,oHAAoH;AACpH,MAAM,mBAAmB,GAAsB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAE5E,SAAS,kBAAkB,CAAC,MAAyB,EAAE,UAA2C;IAChG,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC,CAAC,mFAAmF;IACtH,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,WAAW,IAAI,wBAAwB,CAAC;IAC7H,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,qDAAqD,CAAC;IACpI,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClG,IAAI,CAAC,OAAO,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,UAAU,MAAM,CAAC,MAAM,WAAW,OAAO,IAAI,SAAS,sDAAsD,CAAC;IAClL,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5F,OAAO,UAAU,MAAM,CAAC,MAAM,+CAA+C,CAAC;IAChF,CAAC;IACD,+FAA+F;IAC/F,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,MAAM;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,WAAW,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;IAC5I,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,SAAS;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,yBAAyB,SAAS,GAAG,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mGAAmG;AACnG,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AACpF,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACvE,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAElG,SAAS,qBAAqB,CAC5B,MAAyB,EACzB,UAA2C,EAC3C,QAA2B,EAC3B,IAA6G;IAE7G,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,4GAA4G;IAC5G,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,UAAU,IAAI,kBAAkB;QAAE,OAAO,SAAS,CAAC;IAChH,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,WAAW,IAAI,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAC3J,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,+CAA+C,CAAC;IACxH,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,4FAA4F;QAC5F,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC1K,OAAO,UAAU,MAAM,CAAC,MAAM,6DAA6D,CAAC;QAC9F,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,kBAAkB;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,qCAAqC,CAAC;IAC7F,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IAClI,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,mCAAmC,CAAC;IAC9G,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,SAAS;YAAE,OAAO,UAAU,MAAM,CAAC,MAAM,qBAAqB,SAAS,GAAG,CAAC;IACjF,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AACxF,CAAC;AAED,iIAAiI;AACjI,SAAS,sBAAsB,CAAC,MAAyB,EAAE,UAA2C,EAAE,QAA2B,EAAE,UAA+B;IAClK,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,kBAAkB;QAAE,OAAO,UAAU,MAAM,CAAC,MAAM,8BAA8B,CAAC;IACxH,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,SAAS;QAAE,OAAO,4BAA4B,SAAS,GAAG,CAAC;IAC/D,OAAO,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAyB,EAAE,MAA2B,EAAE,KAA0B,EAAE,UAA+B,EAAE,IAAwB;IACzK,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,GAAG,wBAAwB,CAAC;IAC3I,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0GAA0G;AAC1G,SAAS,aAAa,CAAC,MAAyB,EAAE,UAA2C;IAC3F,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpD,qHAAqH;IACrH,sDAAsD;IACtD,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACjJ,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAyB,EAAE,cAAsB,EAAE,QAAsC;IACjI,IAAI,KAAoC,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM;QAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,KAAK,GAAG,SAAS,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,oBAAoB,MAAM,CAAC,MAAM,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACvF,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvG,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YAC3D,IAAI,MAAM;gBAAE,KAAK,GAAG,MAAM,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;QAChF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yGAAyG;AACzG,SAAS,aAAa,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa;IAChE,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnC,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,QAAsC;IACpF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7J,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,uHAAuH;IACvH,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,2CAA2C,CAAC,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,iHAAiH;IACjH,iFAAiF;IACjF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;AAC/D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,KAAK,GAAG,2EAA2E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtG,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAClG,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4GAA4G;AAC5G,MAAM,YAAY;IAGa;IAA6C;IAF1E,QAAQ,CAAS;IAEjB,YAA6B,IAAY,EAAE,IAAY,EAAmB,GAAW;QAAxD,SAAI,GAAJ,IAAI,CAAQ;QAAiC,QAAG,GAAH,GAAG,CAAQ;QACnF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAC5C,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI;oBAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC9H,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO;YACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,iHAAiH;IACjH,qBAAqB;QACnB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QACjE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,SAAS,CAAC;YACR,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAChD,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACnB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC5G,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,qHAAqH;IACrH,SAAS;QACP,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,qBAAqB,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YACrD,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,SAAS,CAAC;gBACR,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG;oBAAE,OAAO,SAAS,CAAC;gBAChD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;oBACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,SAAS;oBAAE,OAAO,SAAS,CAAC;YACvD,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvD,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,yEAAyE;QACzE,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACtH,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClC,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACzH,IAAI,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,iBAAiB;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC;YAC5C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;YAClC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["/**\n * # The structure of a signed PDF (#2293): what the signatures cover, and what was added after the bytes sent\n *\n * The byte-level half of validating a signed deliverable. It reads no cryptography (the signed-document validator does)\n * and answers three questions about the file the vendor returned:\n *\n * 1. **Where are the signatures, and what do they cover?** Each signature dictionary names a `/ByteRange [0 a b c]`: the\n *    signed bytes are `[0, a)` and `[b, b + c)`, and the gap `[a, b)` must be exactly the `/Contents` hex string, which holds\n *    the CMS signature. A range that does not start at 0, whose gap is not that hex string, or that runs past the file is\n *    refused.\n * 2. **Do the signatures extend the bytes that were sent?** An electronic signature is applied as an INCREMENTAL UPDATE:\n *    the vendor appends to the file it was given. So the file must start with exactly the bytes the approver approved,\n *    ending at one of their `%%EOF` markers, and that prefix must hash to the request's `originalContentSha256`. A vendor\n *    that rewrites the file (re-saves it, flattens it) is refused: what was signed is then not provably what was sent.\n * 3. **Is everything appended after those bytes a PERMITTED change?** Signing adds a signature dictionary, a signature\n *    field and its widget, an appearance, a form, a page's `/Annots` and the catalog's `/AcroForm`; a validation update\n *    adds a `/DSS`. Anything else appended (a new page, changed page content, another kind of annotation over the text, a\n *    catalog swapped through the trailer) is refused, and so is anything after the LAST signature that is not a DSS\n *    update: nothing signed covers it.\n *\n * ## How the appended bytes are read, and the limits that are stated\n *\n * They are WALKED strictly, the way a reader meets them: indirect objects, each closed by `endobj` and a stream's data\n * delimited by its `/Length`; cross-reference sections (tables, and cross-reference streams decoded with FlateDecode and\n * the PNG predictors); trailers; `startxref`; comments. Any other byte is refused, so no object can hide inside another's\n * bytes. Every cross-reference entry appended must point at an object the walk read, by its number and generation, so a\n * reader cannot be sent to bytes the analysis did not judge; freeing an object of the original is refused. An object\n * whose number the original or an earlier revision defined is a REDEFINITION, whatever type it now claims, and is judged\n * against what it replaces: only the catalog's `/AcroForm` and `/DSS`, a page's `/Annots`, a form's fields, an indirect\n * array a page's `/Annots` or a form's `/Fields` names (which may only grow), the trailer's `/Info` dictionary and an XMP\n * stream that was already one may change. After the last signature only NEW `/DSS` data and the catalog's `/DSS` may\n * appear. A form may not gain `/XFA` or `/NeedAppearances`, and the appended trailers keep the original's catalog and\n * encryption.\n *\n * Refused as unreadable: an appended object stream (its objects cannot be read without decompressing it, and a\n * redefinition hidden in one would pass unseen), a cross-reference entry placing an object in one, and a redefinition\n * whose previous definition the original keeps only in a compressed object stream. Admitted without inspecting what it\n * draws: a new appearance stream (`/Type /XObject /Subtype /Form`), which renders only inside its own widget's\n * rectangle and is what every vendor adds to show a signature. A \"shadow\" drawn in a signature widget is therefore not\n * detected; that is this analysis's stated residual. A vendor whose updates this refuses leaves the request open, never\n * SIGNED.\n *\n * Why the residual stays (re-examined 2026-11-12). The published shadow attacks hide content in the document BEFORE it is\n * signed and reveal it in a later update; here the bytes before the signature are the operator's own approved original,\n * and every later update is confined above, so what remains is a widget whose own appearance paints over the page inside\n * its rectangle. Telling a legitimate signature image from one that covers text needs the page RENDERED with and without\n * the widget and compared, which is a PDF renderer in the engine; a rule on the rectangle's size or place would refuse\n * honest visible signatures and still admit a small overlay over one figure. The deliverable that was approved is kept as\n * its frozen original (#2900), so a reader can compare it with the signed copy.\n * Cross-reference updates written as a HYBRID file (a classic section naming a cross-reference stream through /XRefStm)\n * are admitted since 2026-11-12; see `analyseAppendedRevisions`.\n *\n * spec-cite: ISO 32000-1:2008 §7.5.6 (incremental updates), §12.8.1 (signature dictionary: `ByteRange`, `Contents`,\n * `SubFilter`, `M`) and ETSI EN 319 142-1 §5.4 (the DSS dictionary); paraphrased from the structure they define, not\n * quoted.\n */\nimport { createHash } from 'node:crypto';\nimport { inflateSync } from 'node:zlib';\n\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\n\n/** Why a signed PDF's structure was refused. Stable codes: a REJECTED verdict carries one. */\nexport enum PdfSignatureStructureRefusal {\n  /** No signature dictionary with a well-formed byte range was found. */\n  NO_SIGNATURE = 'no_signature',\n  /** A byte range does not start at 0, runs past the file, or its gap is not exactly the `/Contents` hex string. */\n  MALFORMED_BYTE_RANGE = 'malformed_byte_range',\n  /** Bytes follow the last signature and are not a permitted DSS update. */\n  UNSIGNED_BYTES_AFTER_LAST_SIGNATURE = 'unsigned_bytes_after_last_signature',\n  /** No prefix of the file ending at a `%%EOF` hashes to the bytes sent. */\n  ORIGINAL_NOT_A_PREFIX = 'original_not_a_prefix',\n  /** The appended bytes change the document beyond what signing and validation data add. */\n  NOT_A_PERMITTED_CHANGE = 'not_a_permitted_change',\n  /** The appended bytes cannot be analysed (an object stream, a redefinition of a compressed object, an unreadable object). */\n  UNANALYSABLE_UPDATE = 'unanalysable_update',\n}\n\n/** One signature found in the file. */\nexport interface PdfSignatureField {\n  /** `[0, a, b, c]` as declared. */\n  readonly byteRange: readonly [number, number, number, number];\n  /** The DER of the CMS signature: the `/Contents` hex decoded, its zero padding left for the CMS parser to end on. */\n  readonly contents: Uint8Array;\n  /** The signature dictionary's `/SubFilter` name, without the slash. */\n  readonly subFilter: string | undefined;\n  /** The signing time the dictionary's `/M` CLAIMS. The vendor's word, never proof. */\n  readonly claimedSigningTime: Date | undefined;\n  /** The offset just past the last byte this signature covers. */\n  readonly coveredEnd: number;\n}\n\n/** The SubFilters a PAdES / PDF signature validated here may declare: CMS detached signatures. */\nexport const PDF_ACCEPTED_SIGNATURE_SUBFILTERS: ReadonlySet<string> = new Set(['adbe.pkcs7.detached', 'ETSI.CAdES.detached']);\n\nexport type PdfSignatureStructure =\n  | {\n    readonly ok: true;\n    /** The signatures, in the order they cover the file (the first covers the least). */\n    readonly signatures: readonly PdfSignatureField[];\n    /** The length of the original bytes the file starts with. */\n    readonly originalLength: number;\n  }\n  | { readonly ok: false; readonly refusal: PdfSignatureStructureRefusal; readonly reason: string };\n\n/** Read a signed PDF's structure against the hash of the bytes sent (see the module header). Never throws. */\nexport function analysePdfSignatureStructure(file: Uint8Array, originalContentSha256: string): PdfSignatureStructure {\n  try {\n    return analyse(file, originalContentSha256);\n  } catch (error) {\n    return { ok: false, refusal: PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, reason: `The file could not be read: ${describeCaughtError(error)}` };\n  }\n}\n\nfunction refuse(refusal: PdfSignatureStructureRefusal, reason: string): PdfSignatureStructure {\n  return { ok: false, refusal, reason };\n}\n\nfunction analyse(file: Uint8Array, originalContentSha256: string): PdfSignatureStructure {\n  // latin1: one character per byte, so every string offset is a byte offset.\n  const text = Buffer.from(file.buffer, file.byteOffset, file.byteLength).toString('latin1');\n  const signatures: PdfSignatureField[] = [];\n  const byteRangePattern = /\\/ByteRange\\s*\\[\\s*(\\d+)\\s+(\\d+)\\s+(\\d+)\\s+(\\d+)\\s*\\]/g;\n  for (let match = byteRangePattern.exec(text); match; match = byteRangePattern.exec(text)) {\n    const [start, firstLength, secondStart, secondLength] = match.slice(1, 5).map((value) => Number(value)) as [number, number, number, number];\n    if (start !== 0 || firstLength <= 0 || secondStart <= firstLength || secondStart + secondLength > file.byteLength) {\n      return refuse(PdfSignatureStructureRefusal.MALFORMED_BYTE_RANGE, `A signature's byte range [${start} ${firstLength} ${secondStart} ${secondLength}] does not cover the file from its start within its length.`);\n    }\n    const gap = text.slice(firstLength, secondStart);\n    if (!/^<[0-9A-Fa-f\\s]*>$/.test(gap)) {\n      return refuse(PdfSignatureStructureRefusal.MALFORMED_BYTE_RANGE, `A signature's byte range leaves out bytes ${firstLength}–${secondStart} that are not its /Contents hex string.`);\n    }\n    // The dictionary the byte range sits in must be the one whose /Contents is the gap.\n    const objectStart = text.lastIndexOf(' obj', match.index);\n    const objectEnd = text.indexOf('endobj', match.index);\n    if (objectStart < 0 || objectEnd < 0 || firstLength < objectStart || secondStart > objectEnd) {\n      return refuse(PdfSignatureStructureRefusal.MALFORMED_BYTE_RANGE, 'A signature\\'s byte range does not leave out the /Contents of its own signature dictionary.');\n    }\n    const dictionary = text.slice(objectStart, firstLength) + text.slice(secondStart, objectEnd);\n    const hex = gap.slice(1, -1).replace(/\\s+/g, '');\n    signatures.push({\n      byteRange: [start, firstLength, secondStart, secondLength],\n      contents: new Uint8Array(Buffer.from(hex.length % 2 === 0 ? hex : `${hex}0`, 'hex')),\n      subFilter: /\\/SubFilter\\s*\\/([^\\s/<>[\\]()]+)/.exec(dictionary)?.[1],\n      claimedSigningTime: parsePdfDate(/\\/M\\s*\\((D:[^)]*)\\)/.exec(dictionary)?.[1]),\n      coveredEnd: secondStart + secondLength,\n    });\n  }\n  if (signatures.length === 0) return refuse(PdfSignatureStructureRefusal.NO_SIGNATURE, 'The file carries no signature.');\n  signatures.sort((first, second) => first.coveredEnd - second.coveredEnd);\n\n  // The bytes sent, as a prefix ending at one of their %%EOF markers.\n  const firstSignatureStart = Math.min(...signatures.map((signature) => signature.byteRange[1]));\n  const originalLength = originalPrefixLength(file, text, firstSignatureStart, originalContentSha256);\n  if (originalLength === undefined) {\n    return refuse(PdfSignatureStructureRefusal.ORIGINAL_NOT_A_PREFIX, 'The signed file does not start with the bytes that were sent: the vendor did not sign them as an incremental update.');\n  }\n\n  const lastCovered = signatures[signatures.length - 1]!.coveredEnd;\n  const changes = analyseAppendedRevisions(text, originalLength, signatures, lastCovered);\n  if (changes) return changes;\n  return { ok: true, signatures, originalLength };\n}\n\n/**\n * The length of the prefix that hashes to the bytes sent: an offset just past a `%%EOF` marker (and its end-of-line, when\n * the original ended with one), before the first signature.\n */\nfunction originalPrefixLength(file: Uint8Array, text: string, before: number, sha256: string): number | undefined {\n  for (let index = text.indexOf('%%EOF'); index >= 0 && index < before; index = text.indexOf('%%EOF', index + 1)) {\n    const end = index + 5;\n    const candidates = [end];\n    if (text[end] === '\\r' && text[end + 1] === '\\n') candidates.push(end + 2);\n    else if (text[end] === '\\n' || text[end] === '\\r') candidates.push(end + 1);\n    for (const length of candidates) {\n      if (length > before) continue;\n      if (createHash('sha256').update(file.subarray(0, length)).digest('hex') === sha256) return length;\n    }\n  }\n  return undefined;\n}\n\n/** One indirect object as written in the bytes. */\ninterface PdfIndirectObject {\n  readonly number: number;\n  readonly generation: number;\n  /** The offset of the object's number: where a cross-reference entry must point. */\n  readonly offset: number;\n  /** The object's value up to `stream` or `endobj`: a dictionary, an array, or a simple value. */\n  readonly value: string;\n  readonly isStream: boolean;\n  /** A stream's data, as written (undecoded). */\n  readonly streamData?: string;\n}\n\n/** Where a cross-reference entry says an object is (ISO 32000-1 §7.5.4, §7.5.8.3). */\nenum PdfCrossReferenceEntryKind {\n  /** In use, its definition at the entry's byte offset. */\n  IN_USE = 'in_use',\n  /** Free: the object is deleted. */\n  FREE = 'free',\n  /** Stored inside an object stream (refused: the analysis does not read object streams). */\n  COMPRESSED = 'compressed',\n}\n\n/** A cross-reference entry an appended section declares. */\ninterface PdfCrossReferenceEntry {\n  readonly number: number;\n  readonly generation: number;\n  readonly kind: PdfCrossReferenceEntryKind;\n  readonly offset: number;\n}\n\n/** What the strict walk of the appended bytes found. */\ninterface PdfAppendedRegion {\n  readonly objects: readonly PdfIndirectObject[];\n  readonly crossReferences: readonly PdfCrossReferenceEntry[];\n  /** Every trailer dictionary: a classic `trailer`, or a cross-reference stream's own dictionary. */\n  readonly trailers: ReadonlyArray<{ readonly entries: Map<string, string>; readonly sectionOffset: number }>;\n  /** The offset of every cross-reference section walked: an `xref` keyword, or a cross-reference stream's object. */\n  readonly sectionOffsets: readonly number[];\n  /** Every `startxref` value, in order. */\n  readonly startxrefValues: readonly number[];\n}\n\n/** Thrown inside the walk; turned into an UNANALYSABLE refusal. */\nclass UnanalysableUpdate extends Error {}\n\n/**\n * Walk the bytes after the original STRICTLY, the way a reader meets them: indirect objects (each closed by `endobj`,\n * a stream's data delimited by its `/Length`), cross-reference sections, trailers, `startxref` and comments. Anything else\n * is refused, so no object can hide inside another's bytes (an object left without `endobj`, data between objects).\n */\nfunction walkAppendedRegion(text: string, from: number): PdfAppendedRegion {\n  const objects: PdfIndirectObject[] = [];\n  const crossReferences: PdfCrossReferenceEntry[] = [];\n  const trailers: Array<{ entries: Map<string, string>; sectionOffset: number }> = [];\n  const sectionOffsets: number[] = [];\n  const startxrefValues: number[] = [];\n  let lastTableOffset = -1;\n  const tokens = new PdfTokenizer(text, from, text.length);\n  for (;;) {\n    tokens.skipWhitespace();\n    if (tokens.position >= text.length) break;\n    const at = tokens.position;\n    const header = /^(\\d+)\\s+(\\d+)\\s+obj\\b/.exec(text.slice(at, at + 40));\n    if (header) {\n      tokens.position = at + header[0].length;\n      const valueStart = tokens.position;\n      if (tokens.readValue() === undefined) throw new UnanalysableUpdate(`object ${header[1]} at ${at} has no readable value`);\n      const value = text.slice(valueStart, tokens.position).trim();\n      tokens.skipWhitespace();\n      let isStream = false;\n      let streamData: string | undefined;\n      if (text.startsWith('stream', tokens.position)) {\n        isStream = true;\n        let dataStart = tokens.position + 'stream'.length;\n        if (text[dataStart] === '\\r' && text[dataStart + 1] === '\\n') dataStart += 2;\n        else if (text[dataStart] === '\\n') dataStart += 1;\n        else throw new UnanalysableUpdate(`object ${header[1]}: 'stream' is not followed by an end of line`);\n        // Stated residual: a stream's data is not searched for text shaped like an object or a section. While a reader\n        // follows the cross-reference sections (every one checked below) such text is inert; a reader that rebuilds a\n        // damaged table by scanning the file could pick it up. Refusing on a pattern would refuse genuine DER data by chance.\n        const length = streamLengthOf(text, parseDictionaryOrUndefined(value), from);\n        streamData = text.slice(dataStart, dataStart + length);\n        tokens.position = dataStart + length;\n        tokens.skipWhitespace();\n        if (!text.startsWith('endstream', tokens.position)) throw new UnanalysableUpdate(`object ${header[1]}: its stream does not end where its /Length says`);\n        tokens.position += 'endstream'.length;\n        tokens.skipWhitespace();\n      }\n      if (!text.startsWith('endobj', tokens.position)) throw new UnanalysableUpdate(`object ${header[1]} at ${at} is not closed by endobj`);\n      tokens.position += 'endobj'.length;\n      const object: PdfIndirectObject = { number: Number(header[1]), generation: Number(header[2]), offset: at, value, isStream, ...(streamData !== undefined ? { streamData } : {}) };\n      objects.push(object);\n      const dictionary = parseDictionaryOrUndefined(value);\n      if (dictionary?.get('/Type') === '/XRef') {\n        if (!isStream || streamData === undefined) throw new UnanalysableUpdate(`object ${header[1]} is a cross-reference stream without data`);\n        crossReferences.push(...crossReferenceStreamEntries(dictionary, streamData));\n        trailers.push({ entries: dictionary, sectionOffset: at });\n        sectionOffsets.push(at);\n      }\n      continue;\n    }\n    if (text.startsWith('xref', at)) {\n      tokens.position = at + 'xref'.length;\n      crossReferences.push(...readCrossReferenceTable(text, tokens));\n      sectionOffsets.push(at);\n      lastTableOffset = at;\n      continue;\n    }\n    if (text.startsWith('trailer', at)) {\n      tokens.position = at + 'trailer'.length;\n      const entries = tokens.readDictionaryEntries();\n      if (!entries) throw new UnanalysableUpdate(`the trailer at ${at} is not a dictionary`);\n      if (lastTableOffset < 0) throw new UnanalysableUpdate(`the trailer at ${at} follows no cross-reference table`);\n      trailers.push({ entries, sectionOffset: lastTableOffset });\n      lastTableOffset = -1;\n      continue;\n    }\n    if (text.startsWith('startxref', at)) {\n      tokens.position = at + 'startxref'.length;\n      tokens.skipWhitespace();\n      const number = /^\\d+/.exec(text.slice(tokens.position, tokens.position + 20));\n      if (!number) throw new UnanalysableUpdate(`startxref at ${at} names no offset`);\n      startxrefValues.push(Number(number[0]));\n      tokens.position += number[0].length;\n      continue;\n    }\n    throw new UnanalysableUpdate(`bytes at ${at} are neither an object, a cross-reference section nor a trailer`);\n  }\n  return { objects, crossReferences, trailers, sectionOffsets, startxrefValues };\n}\n\n/** A stream's `/Length`: direct, or an indirect integer object defined in the appended bytes. */\nfunction streamLengthOf(text: string, dictionary: Map<string, string> | undefined, from: number): number {\n  const raw = dictionary?.get('/Length');\n  if (raw === undefined) throw new UnanalysableUpdate('a stream declares no /Length');\n  if (/^\\d+$/.test(raw)) return Number(raw);\n  const reference = /^(\\d+) (\\d+) R$/.exec(raw);\n  if (!reference) throw new UnanalysableUpdate(`a stream's /Length \"${raw}\" cannot be read`);\n  const definition = new RegExp(`(?:^|[\\\\r\\\\n\\\\s])${reference[1]}\\\\s+${reference[2]}\\\\s+obj\\\\s+(\\\\d+)\\\\s+endobj`).exec(text.slice(from));\n  if (!definition) throw new UnanalysableUpdate(`a stream's /Length ${raw} is not an integer object of the update`);\n  return Number(definition[1]);\n}\n\n/** A classic cross-reference table: subsections of `start count`, then 20-byte entries, up to `trailer`. */\nfunction readCrossReferenceTable(text: string, tokens: PdfTokenizer): PdfCrossReferenceEntry[] {\n  const entries: PdfCrossReferenceEntry[] = [];\n  for (;;) {\n    tokens.skipWhitespace();\n    if (text.startsWith('trailer', tokens.position)) return entries;\n    const subsection = /^(\\d+)\\s+(\\d+)[ \\t]*\\r?\\n/.exec(text.slice(tokens.position, tokens.position + 40));\n    if (!subsection) throw new UnanalysableUpdate(`a cross-reference subsection at ${tokens.position} cannot be read`);\n    tokens.position += subsection[0].length;\n    const start = Number(subsection[1]);\n    const count = Number(subsection[2]);\n    for (let index = 0; index < count; index += 1) {\n      const entry = /^(\\d{10}) (\\d{5}) ([nf])\\s{0,2}/.exec(text.slice(tokens.position, tokens.position + 22));\n      if (!entry) throw new UnanalysableUpdate(`cross-reference entry ${start + index} cannot be read`);\n      tokens.position += entry[0].length;\n      entries.push({ number: start + index, generation: Number(entry[2]), kind: entry[3] === 'n' ? PdfCrossReferenceEntryKind.IN_USE : PdfCrossReferenceEntryKind.FREE, offset: Number(entry[1]) });\n    }\n  }\n}\n\n/** The entries of a cross-reference stream (FlateDecode with or without a PNG predictor, or no filter). */\nfunction crossReferenceStreamEntries(dictionary: Map<string, string>, data: string): PdfCrossReferenceEntry[] {\n  const widths = (/^\\[\\s*(\\d+)\\s+(\\d+)\\s+(\\d+)\\s*\\]$/.exec(dictionary.get('/W') ?? '') ?? []).slice(1).map(Number);\n  if (widths.length !== 3) throw new UnanalysableUpdate('a cross-reference stream has no readable /W');\n  const filter = dictionary.get('/Filter');\n  let bytes: Buffer = Buffer.from(data, 'latin1');\n  if (filter === '/FlateDecode' || filter === '[/FlateDecode]' || filter === '[ /FlateDecode ]') bytes = inflateSync(bytes);\n  else if (filter !== undefined) throw new UnanalysableUpdate(`a cross-reference stream uses ${filter}`);\n  const rowLength = widths[0]! + widths[1]! + widths[2]!;\n  const parameters = parseDictionaryOrUndefined(dictionary.get('/DecodeParms') ?? '');\n  const predictor = Number(parameters?.get('/Predictor') ?? 1);\n  if (predictor >= 10) bytes = undoPngPredictor(bytes, Number(parameters?.get('/Columns') ?? rowLength));\n  else if (predictor !== 1) throw new UnanalysableUpdate(`a cross-reference stream uses predictor ${predictor}`);\n  const size = Number(dictionary.get('/Size'));\n  const index = (/^\\[([\\d\\s]+)\\]$/.exec(dictionary.get('/Index') ?? '')?.[1]?.trim().split(/\\s+/).map(Number)) ?? [0, size];\n  const entries: PdfCrossReferenceEntry[] = [];\n  let row = 0;\n  for (let pair = 0; pair + 1 < index.length; pair += 2) {\n    for (let number = index[pair]!; number < index[pair]! + index[pair + 1]!; number += 1, row += 1) {\n      const at = row * rowLength;\n      if (at + rowLength > bytes.length) throw new UnanalysableUpdate('a cross-reference stream is shorter than its /Index');\n      const field = (start: number, width: number, fallback: number) => {\n        if (width === 0) return fallback;\n        let value = 0;\n        for (let offset = 0; offset < width; offset += 1) value = value * 256 + bytes[at + start + offset]!;\n        return value;\n      };\n      const type = field(0, widths[0]!, 1);\n      const second = field(widths[0]!, widths[1]!, 0);\n      const third = field(widths[0]! + widths[1]!, widths[2]!, 0);\n      const kind = type === 1 ? PdfCrossReferenceEntryKind.IN_USE : type === 0 ? PdfCrossReferenceEntryKind.FREE : PdfCrossReferenceEntryKind.COMPRESSED;\n      entries.push({ number, generation: type === 1 ? third : 0, kind, offset: second });\n    }\n  }\n  return entries;\n}\n\n/** Undo the PNG predictors of a FlateDecode stream (ISO 32000-1 §7.4.4.4): one filter-type byte per row. */\nfunction undoPngPredictor(bytes: Buffer, columns: number): Buffer {\n  const rows: Buffer[] = [];\n  let previous = Buffer.alloc(columns);\n  for (let at = 0; at + columns < bytes.length + 1 && at < bytes.length; at += columns + 1) {\n    const type = bytes[at]!;\n    const row = Buffer.from(bytes.subarray(at + 1, at + 1 + columns));\n    for (let column = 0; column < columns; column += 1) {\n      const left = column > 0 ? row[column - 1]! : 0;\n      const up = previous[column]!;\n      const upLeft = column > 0 ? previous[column - 1]! : 0;\n      if (type === 1) row[column] = (row[column]! + left) & 0xff;\n      else if (type === 2) row[column] = (row[column]! + up) & 0xff;\n      else if (type === 3) row[column] = (row[column]! + Math.floor((left + up) / 2)) & 0xff;\n      else if (type === 4) {\n        const estimate = left + up - upLeft;\n        const [pa, pb, pc] = [Math.abs(estimate - left), Math.abs(estimate - up), Math.abs(estimate - upLeft)];\n        row[column] = (row[column]! + (pa <= pb && pa <= pc ? left : pb <= pc ? up : upLeft)) & 0xff;\n      } else if (type !== 0) throw new UnanalysableUpdate(`a cross-reference stream row uses PNG filter ${type}`);\n    }\n    rows.push(row);\n    previous = row;\n  }\n  return Buffer.concat(rows);\n}\n\n/**\n * The appended revisions, checked for permitted changes (module header, question 3). Answers a refusal, or `undefined`\n * when every appended object is a signing or validation addition and nothing unsigned follows the last signature but a\n * DSS update.\n */\nfunction analyseAppendedRevisions(text: string, originalLength: number, signatures: readonly PdfSignatureField[], lastCovered: number): PdfSignatureStructure | undefined {\n  const original = text.slice(0, originalLength);\n  const originalSize = lastNumberOf(original, /\\/Size\\s+(\\d+)/g);\n  const originalRoot = lastMatchOf(original, /\\/Root\\s+(\\d+\\s+\\d+\\s+R)/g);\n  const originalEncrypt = lastMatchOf(original, /\\/Encrypt\\s+(\\d+\\s+\\d+\\s+R)/g);\n  if (originalSize === undefined || originalRoot === undefined) {\n    return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, 'The bytes sent declare no trailer /Size or /Root, so what was appended to them cannot be told apart.');\n  }\n  void signatures;\n  let region: PdfAppendedRegion;\n  try {\n    region = walkAppendedRegion(text, originalLength);\n  } catch (error) {\n    return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `The bytes after the original cannot be read: ${describeCaughtError(error)}`);\n  }\n\n  // The trailers appended keep the catalog and the encryption the bytes sent named.\n  // A reader finds the cross-reference sections through `startxref`, `/Prev` and `/XRefStm`: each must name a section\n  // the walk READ (or, for the chain into the original, the original's own), so no section hidden in a stream's data, or\n  // anywhere else the walk did not judge, can be the one a reader follows.\n  // Into the original, a /Prev names the original's LAST section only: one naming an earlier section would make a reader\n  // skip the original's own later updates, so render a version of the document other than the one sent.\n  const walkedSections = new Set(region.sectionOffsets);\n  const originalStartxrefs = allMatchesOf(original, /startxref\\s+(\\d+)/g).map(Number);\n  const originalLastSection = originalStartxrefs[originalStartxrefs.length - 1];\n  const originalCrossReferenceStreams = new Set(allMatchesOf(original, /\\/XRefStm\\s+(\\d+)/g).map(Number));\n  if (region.startxrefValues.some((value) => !walkedSections.has(value))) {\n    return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended startxref names a cross-reference section the analysis did not read.');\n  }\n  const lastSection = region.sectionOffsets[region.sectionOffsets.length - 1];\n  const lastStartxref = region.startxrefValues[region.startxrefValues.length - 1];\n  if (region.sectionOffsets.length > 0 && lastStartxref !== lastSection) {\n    return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'The file\\'s last startxref does not name its last cross-reference section.');\n  }\n  // Each appended section chains to the one immediately before it (the first to the original's last): a /Prev that skips\n  // a revision would show a reader the document without, say, the signature that revision added.\n  //\n  // A HYBRID update is the one exception. Its cross-reference stream is not a revision of its own: the classic section of\n  // the same update names it through /XRefStm, and a reader reaches it only from there, searching it before that section's\n  // /Prev. ISO 32000-1 says a cross-reference stream's /Prev is \"not meaningful in hybrid-reference files\".\n  // spec-cite: ISO 32000-1:2008 §7.5.8.2 Table 17 (the Prev row), and §7.5.8.4 (the XRefStm search order).\n  // So a cross-reference stream that the VERY NEXT appended section names by /XRefStm is admitted without a /Prev of its\n  // own (or with one equal to that section's, which changes nothing), and does not advance the chain. Its entries are\n  // judged with every other appended entry below. Until 2026-11-12 every hybrid update was refused.\n  const hybridCompanions = new Set<number>();\n  let expectedPrev = originalLastSection;\n  for (const [index, { entries, sectionOffset }] of region.trailers.entries()) {\n    const namingSection = region.trailers[index + 1];\n    const hybridCompanion = entries.get('/Type') === '/XRef'\n      && namingSection?.entries.get('/XRefStm') !== undefined\n      && Number(namingSection.entries.get('/XRefStm')) === sectionOffset\n      && (entries.get('/Prev') === undefined || Number(entries.get('/Prev')) === expectedPrev);\n    if (hybridCompanion) {\n      hybridCompanions.add(sectionOffset);\n      continue;\n    }\n    // An incremental update chains to what it updates: a section without /Prev would hide the whole original from a reader.\n    if (entries.get('/Prev') === undefined || Number(entries.get('/Prev')) !== expectedPrev) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended cross-reference section does not chain to the revision it updates.');\n    }\n    expectedPrev = sectionOffset;\n    // A hybrid file's /XRefStm names a cross-reference stream: one the walk read, before this section, or the original's.\n    const xrefStream = entries.get('/XRefStm');\n    if (xrefStream !== undefined) {\n      const offset = Number(xrefStream);\n      const admitted = (walkedSections.has(offset) && offset < sectionOffset) || originalCrossReferenceStreams.has(offset);\n      if (!/^\\d+$/.test(xrefStream) || !admitted) {\n        return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended trailer\\'s /XRefStm names a cross-reference stream the analysis did not read.');\n      }\n    }\n  }\n  for (const { entries: trailer, sectionOffset } of region.trailers) {\n    const root = trailer.get('/Root');\n    // A hybrid companion is read only through the section naming it, whose /Root a reader takes; it may name none.\n    const rootOptional = hybridCompanions.has(sectionOffset);\n    if ((root === undefined && !rootOptional) || (root !== undefined && normalizeReference(root) !== normalizeReference(originalRoot))) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended trailer names another catalog than the bytes sent.');\n    }\n    const encrypt = trailer.get('/Encrypt');\n    if ((encrypt ?? '') !== (originalEncrypt ?? '') && !(encrypt && originalEncrypt && normalizeReference(encrypt) === normalizeReference(originalEncrypt))) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, 'An appended trailer changes the document\\'s encryption.');\n    }\n  }\n\n  // Every cross-reference entry appended points at an object this walk read, by its number and generation: a reader\n  // finds objects through these entries, so none may point into another object's bytes or back into the bytes sent.\n  const objectAt = new Map(region.objects.map((object) => [object.offset, object]));\n  for (const entry of region.crossReferences) {\n    if (entry.kind === PdfCrossReferenceEntryKind.COMPRESSED) {\n      return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `Object ${entry.number} is placed in an object stream by an appended cross-reference stream.`);\n    }\n    if (entry.kind === PdfCrossReferenceEntryKind.FREE) {\n      if (entry.number !== 0 && (entry.number < originalSize || region.objects.some((object) => object.number === entry.number))) {\n        return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, `An appended cross-reference section frees object ${entry.number}.`);\n      }\n      continue;\n    }\n    const target = objectAt.get(entry.offset);\n    if (!target || target.number !== entry.number || target.generation !== entry.generation) {\n      return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, `An appended cross-reference entry for object ${entry.number} does not point at that object's definition in the update.`);\n    }\n  }\n\n  const infoReference = lastMatchOf(original, /\\/Info\\s+(\\d+\\s+\\d+\\s+R)/g);\n  const rootNumber = Number(originalRoot.split(/\\s+/)[0]);\n  const infoNumber = infoReference ? Number(infoReference.split(/\\s+/)[0]) : undefined;\n  const growableArrays = growableArrayNumbers(original, region.objects);\n\n  for (const object of region.objects) {\n    const dictionary = parseDictionaryOrUndefined(object.value);\n    const type = dictionary?.get('/Type');\n    const afterLastSignature = object.offset >= lastCovered;\n    const previous = previousDefinition(text, object, originalLength, region.objects);\n    const existedBefore = object.number < originalSize || previous !== undefined;\n\n    if (existedBefore) {\n      // A redefinition, whatever it calls itself: judged against what it replaces.\n      if (!previous) {\n        return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `Object ${object.number} is redefined, and its previous definition is not a plain object the analysis can compare.`);\n      }\n      if (afterLastSignature) {\n        const refusal = object.number === rootNumber ? refusalOfCatalogChange(object, dictionary, previous, new Set(['/DSS'])) : `Object ${object.number} is changed after the last signature.`;\n        if (refusal) return refuse(PdfSignatureStructureRefusal.UNSIGNED_BYTES_AFTER_LAST_SIGNATURE, refusal);\n        continue;\n      }\n      const refusal = refusalOfRedefinition(object, dictionary, previous, { isCatalog: object.number === rootNumber, isInfo: object.number === infoNumber, growableArrays });\n      if (refusal) return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, refusal);\n      continue;\n    }\n\n    // A new object.\n    if (type === '/ObjStm') {\n      return refuse(PdfSignatureStructureRefusal.UNANALYSABLE_UPDATE, `Object ${object.number} is an object stream appended after the bytes sent; the objects in it cannot be checked.`);\n    }\n    if (type === '/XRef') continue;\n    if (afterLastSignature) {\n      if (!isDssAddition(object, dictionary)) {\n        return refuse(PdfSignatureStructureRefusal.UNSIGNED_BYTES_AFTER_LAST_SIGNATURE, `Object ${object.number}, after the last signature, is not a document security store update.`);\n      }\n      continue;\n    }\n    const refusal = refusalOfNewObject(object, dictionary);\n    if (refusal) return refuse(PdfSignatureStructureRefusal.NOT_A_PERMITTED_CHANGE, refusal);\n  }\n  return undefined;\n}\n\n/** The kinds of object signing and validation data add. Anything else new (a page, a free-text annotation) is refused. */\nconst NEW_OBJECT_TYPES: ReadonlySet<string> = new Set(['/Sig', '/DSS', '/VRI', '/XObject', '/Font', '/FontDescriptor', '/Annot', '/Encoding']);\nconst ANNOTATION_SUBTYPES_ADMITTED: ReadonlySet<string> = new Set(['/Widget']);\n/** Form keys that would change what the document shows or does when opened (XFA forms, regenerated appearances). */\nconst FORBIDDEN_FORM_KEYS: readonly string[] = ['/XFA', '/NeedAppearances'];\n\nfunction refusalOfNewObject(object: PdfIndirectObject, dictionary: Map<string, string> | undefined): string | undefined {\n  if (!dictionary) return undefined; // An array or a simple value: reachable only through a key the checks below admit.\n  const type = dictionary.get('/Type');\n  const subtype = dictionary.get('/Subtype');\n  if (type !== undefined && !NEW_OBJECT_TYPES.has(type)) return `Object ${object.number} adds a ${type} after the bytes sent.`;\n  if (type === '/XObject' && subtype !== '/Form') return `Object ${object.number} adds an image or other XObject, not an appearance.`;\n  if (type === '/Annot' || (subtype !== undefined && type === undefined && dictionary.has('/Rect'))) {\n    if (!subtype || !ANNOTATION_SUBTYPES_ADMITTED.has(subtype)) return `Object ${object.number} adds a ${subtype ?? 'untyped'} annotation, which can cover the document's content.`;\n  }\n  if (subtype === '/Widget' && dictionary.get('/FT') !== '/Sig' && !dictionary.has('/Parent')) {\n    return `Object ${object.number} adds a widget that is not a signature field.`;\n  }\n  // A form field that is not a signature field could change what the document shows when filled.\n  if (dictionary.has('/FT') && dictionary.get('/FT') !== '/Sig') return `Object ${object.number} adds a ${dictionary.get('/FT')} form field.`;\n  const forbidden = FORBIDDEN_FORM_KEYS.find((key) => dictionary.has(key));\n  if (forbidden) return `Object ${object.number} adds a form carrying ${forbidden}.`;\n  return undefined;\n}\n\n/** The keys a redefinition may change, per kind of object; every other key must keep its value. */\nconst CATALOG_CHANGEABLE_KEYS: ReadonlySet<string> = new Set(['/AcroForm', '/DSS']);\nconst PAGE_CHANGEABLE_KEYS: ReadonlySet<string> = new Set(['/Annots']);\nconst FORM_CHANGEABLE_KEYS: ReadonlySet<string> = new Set(['/Fields', '/SigFlags', '/DR', '/DA']);\n\nfunction refusalOfRedefinition(\n  object: PdfIndirectObject,\n  dictionary: Map<string, string> | undefined,\n  previous: PdfIndirectObject,\n  kind: { readonly isCatalog: boolean; readonly isInfo: boolean; readonly growableArrays: ReadonlySet<number> },\n): string | undefined {\n  const previousDictionary = parseDictionaryOrUndefined(previous.value);\n  // Document metadata, invisible on the page: the trailer's /Info dictionary, and an XMP stream that WAS one.\n  if (kind.isInfo && !object.isStream && !previous.isStream && dictionary && previousDictionary) return undefined;\n  if (object.isStream && previous.isStream && dictionary?.get('/Type') === '/Metadata' && previousDictionary?.get('/Type') === '/Metadata') return undefined;\n  if (object.isStream || previous.isStream) return `Object ${object.number}, a stream, is replaced after the bytes sent.`;\n  if (kind.isCatalog) return refusalOfCatalogChange(object, dictionary, previous, CATALOG_CHANGEABLE_KEYS);\n  if (!dictionary) {\n    // An indirect array may only grow, and only one a page's /Annots or a form's /Fields names.\n    const before = referencesIn(previous.value);\n    const after = referencesIn(object.value);\n    if (!kind.growableArrays.has(object.number) || !previous.value.startsWith('[') || !object.value.startsWith('[') || before.some((reference) => !after.includes(reference))) {\n      return `Object ${object.number} is replaced by a value that drops or changes what it held.`;\n    }\n    return undefined;\n  }\n  if (!previousDictionary) return `Object ${object.number} changes kind after the bytes sent.`;\n  const type = previousDictionary.get('/Type');\n  const changeable = type === '/Page' ? PAGE_CHANGEABLE_KEYS : previousDictionary.has('/Fields') ? FORM_CHANGEABLE_KEYS : undefined;\n  if (!changeable) return `Object ${object.number}${type ? ` (${type})` : ''} is changed after the bytes sent.`;\n  if (changeable === FORM_CHANGEABLE_KEYS) {\n    const forbidden = FORBIDDEN_FORM_KEYS.find((key) => dictionary.has(key));\n    if (forbidden) return `Object ${object.number}, the form, gains ${forbidden}.`;\n  }\n  return refusalOfChangedKeys(object, previousDictionary, dictionary, changeable, type);\n}\n\n/** A catalog redefinition: only `changeable` keys may differ, and an inline form may not gain XFA or regenerated appearances. */\nfunction refusalOfCatalogChange(object: PdfIndirectObject, dictionary: Map<string, string> | undefined, previous: PdfIndirectObject, changeable: ReadonlySet<string>): string | undefined {\n  const previousDictionary = parseDictionaryOrUndefined(previous.value);\n  if (object.isStream || !dictionary || !previousDictionary) return `Object ${object.number}, the catalog, changes kind.`;\n  const form = dictionary.get('/AcroForm');\n  const inlineForm = form?.startsWith('<<') ? parseDictionaryOrUndefined(form) : undefined;\n  const forbidden = inlineForm ? FORBIDDEN_FORM_KEYS.find((key) => inlineForm.has(key)) : undefined;\n  if (forbidden) return `The catalog's form gains ${forbidden}.`;\n  return refusalOfChangedKeys(object, previousDictionary, dictionary, changeable, '/Catalog');\n}\n\nfunction refusalOfChangedKeys(object: PdfIndirectObject, before: Map<string, string>, after: Map<string, string>, changeable: ReadonlySet<string>, type: string | undefined): string | undefined {\n  for (const key of new Set([...before.keys(), ...after.keys()])) {\n    if (changeable.has(key)) continue;\n    if (before.get(key) !== after.get(key)) return `Object ${object.number}${type ? ` (${type})` : ''} changes ${key} after the bytes sent.`;\n  }\n  return undefined;\n}\n\n/** Whether a NEW object appended after the last signature belongs to a document security store update. */\nfunction isDssAddition(object: PdfIndirectObject, dictionary: Map<string, string> | undefined): boolean {\n  if (!dictionary) return object.value.startsWith('[');\n  const type = dictionary.get('/Type');\n  if (type === '/DSS' || type === '/VRI') return true;\n  // The DSS's certificate, CRL and OCSP streams carry no type; an untyped dictionary or stream with no keys of a page,\n  // an annotation or a form is data the DSS references.\n  return type === undefined && !dictionary.has('/Subtype') && !dictionary.has('/FT') && !dictionary.has('/Rect') && !dictionary.has('/Contents');\n}\n\n/**\n * The definition `object` replaces: the last one before it in the update's walk, else the last plain one in the bytes sent\n * (`undefined` when the original keeps it only in a compressed object stream). By object NUMBER, whatever the generation:\n * a new generation of an object number is still a replacement of what that number held, and is judged as one.\n */\nfunction previousDefinition(text: string, object: PdfIndirectObject, originalLength: number, appended: readonly PdfIndirectObject[]): PdfIndirectObject | undefined {\n  let found: PdfIndirectObject | undefined;\n  for (const candidate of appended) {\n    if (candidate.offset >= object.offset) break;\n    if (candidate.number === object.number) found = candidate;\n  }\n  if (found) return found;\n  const pattern = new RegExp(`(?:^|[\\\\r\\\\n\\\\s])${object.number}\\\\s+\\\\d+\\\\s+obj\\\\b`, 'g');\n  for (let match = pattern.exec(text); match && match.index < originalLength; match = pattern.exec(text)) {\n    const offset = match.index + match[0].indexOf(String(object.number));\n    try {\n      const walked = walkOneObject(text, offset, originalLength);\n      if (walked) found = walked;\n    } catch {\n      // Not readable as a plain object here; an earlier or later definition may be.\n    }\n  }\n  return found;\n}\n\n/** One plain object at `offset` in the bytes sent, delimited the way the walk delimits appended ones. */\nfunction walkOneObject(text: string, offset: number, limit: number): PdfIndirectObject | undefined {\n  const header = /^(\\d+)\\s+(\\d+)\\s+obj\\b/.exec(text.slice(offset, offset + 40));\n  if (!header) return undefined;\n  const tokens = new PdfTokenizer(text, offset + header[0].length, limit);\n  const valueStart = tokens.position;\n  if (tokens.readValue() === undefined) return undefined;\n  const value = text.slice(valueStart, tokens.position).trim();\n  tokens.skipWhitespace();\n  const isStream = text.startsWith('stream', tokens.position);\n  return { number: Number(header[1]), generation: Number(header[2]), offset, value, isStream };\n}\n\n/**\n * The indirect arrays that may grow: those a PAGE's `/Annots` or a FORM's `/Fields` names, read from the original and\n * from the appended pages, catalog and forms (never from an arbitrary appended object, which could otherwise name any\n * array). An array the original names under any other key (a page's `/Contents`, `/Kids`) is never growable, whatever\n * else names it.\n */\nfunction growableArrayNumbers(original: string, appended: readonly PdfIndirectObject[]): ReadonlySet<number> {\n  const named = (text: string) => [...text.matchAll(/\\/(?:Annots|Fields)\\s+(\\d+)\\s+\\d+\\s+R/g)].map((match) => Number(match[1]));\n  const growable = new Set(named(original));\n  for (const object of appended) {\n    const dictionary = parseDictionaryOrUndefined(object.value);\n    if (dictionary && (dictionary.get('/Type') === '/Page' || dictionary.get('/Type') === '/Catalog' || (dictionary.has('/Fields') && !dictionary.has('/Type')))) {\n      for (const number of named(object.value)) growable.add(number);\n    }\n  }\n  // Every other reference of the original, under any key (a name may carry digits: `/CS0`) or as an element of an array.\n  for (const match of original.matchAll(/(\\/[^\\s/<>\\[\\]()]+\\s+)?(\\d+)\\s+\\d+\\s+R\\b/g)) {\n    const key = match[1]?.trim();\n    if (key !== '/Annots' && key !== '/Fields') growable.delete(Number(match[2]));\n  }\n  // The type filter above is defence in depth: an array the original references only through /Annots or /Fields is\n  // growable from the original already, and every other reference removes it here.\n  return growable;\n}\n\nfunction referencesIn(value: string): string[] {\n  return [...value.matchAll(/(\\d+)\\s+(\\d+)\\s+R/g)].map((match) => `${match[1]} ${match[2]} R`);\n}\n\nfunction normalizeReference(reference: string): string {\n  return reference.trim().split(/\\s+/).join(' ');\n}\n\nfunction lastNumberOf(text: string, pattern: RegExp): number | undefined {\n  const value = lastMatchOf(text, pattern);\n  return value === undefined ? undefined : Number(value);\n}\n\nfunction lastMatchOf(text: string, pattern: RegExp): string | undefined {\n  const all = allMatchesOf(text, pattern);\n  return all.length > 0 ? all[all.length - 1] : undefined;\n}\n\nfunction allMatchesOf(text: string, pattern: RegExp): string[] {\n  return [...text.matchAll(pattern)].map((match) => match[1]!);\n}\n\n/** A PDF date (`D:YYYYMMDDHHmmSSOHH'mm`) as an instant; `undefined` when it does not read. */\nexport function parsePdfDate(value: string | undefined): Date | undefined {\n  if (!value) return undefined;\n  const match = /^D:(\\d{4})(\\d{2})?(\\d{2})?(\\d{2})?(\\d{2})?(\\d{2})?(Z|[+-]\\d{2}'?\\d{2}'?)?/.exec(value);\n  if (!match) return undefined;\n  const [, year, month = '01', day = '01', hour = '00', minute = '00', second = '00', zone] = match;\n  let offset = 'Z';\n  if (zone && zone !== 'Z') {\n    const digits = zone.replace(/'/g, '');\n    offset = `${digits.slice(0, 3)}:${digits.slice(3, 5) || '00'}`;\n  }\n  const date = new Date(`${year}-${month}-${day}T${hour}:${minute}:${second}${offset}`);\n  return Number.isNaN(date.getTime()) ? undefined : date;\n}\n\n/**\n * A PDF dictionary's top-level keys and their values, each value normalized to single spaces so two definitions can be\n * compared. `undefined` when `value` is not a dictionary.\n */\nexport function parseDictionaryOrUndefined(value: string): Map<string, string> | undefined {\n  if (!value.startsWith('<<')) return undefined;\n  const tokens = new PdfTokenizer(value, 0, value.length);\n  const entries = tokens.readDictionaryEntries();\n  return entries;\n}\n\n/** A minimal PDF tokenizer: enough to delimit values (nested dictionaries, arrays, strings, references). */\nclass PdfTokenizer {\n  position: number;\n\n  constructor(private readonly text: string, from: number, private readonly end: number) {\n    this.position = from;\n  }\n\n  skipWhitespace(): void {\n    while (this.position < this.end) {\n      const character = this.text[this.position]!;\n      if (character === '%') {\n        while (this.position < this.end && this.text[this.position] !== '\\n' && this.text[this.position] !== '\\r') this.position += 1;\n        continue;\n      }\n      if (!/[\\s\\0]/.test(character)) return;\n      this.position += 1;\n    }\n  }\n\n  /** The dictionary at the cursor as key → normalized value; `undefined` when it is not one or is unterminated. */\n  readDictionaryEntries(): Map<string, string> | undefined {\n    this.skipWhitespace();\n    if (!this.text.startsWith('<<', this.position)) return undefined;\n    this.position += 2;\n    const entries = new Map<string, string>();\n    for (;;) {\n      this.skipWhitespace();\n      if (this.position >= this.end) return undefined;\n      if (this.text.startsWith('>>', this.position)) {\n        this.position += 2;\n        return entries;\n      }\n      const key = this.readName();\n      if (key === undefined) return undefined;\n      const start = this.position;\n      if (this.readValue() === undefined) return undefined;\n      entries.set(key, this.text.slice(start, this.position).trim().replace(/\\s+/g, ' '));\n    }\n  }\n\n  private readName(): string | undefined {\n    this.skipWhitespace();\n    if (this.text[this.position] !== '/') return undefined;\n    const start = this.position;\n    this.position += 1;\n    while (this.position < this.end && !/[\\s\\0/<>[\\]()%{}]/.test(this.text[this.position]!)) this.position += 1;\n    return this.text.slice(start, this.position);\n  }\n\n  /** Skip one value (an indirect reference counts as one). Answers `true`, or `undefined` when it does not delimit. */\n  readValue(): true | undefined {\n    this.skipWhitespace();\n    if (this.position >= this.end) return undefined;\n    const character = this.text[this.position]!;\n    if (this.text.startsWith('<<', this.position)) {\n      return this.readDictionaryEntries() === undefined ? undefined : true;\n    }\n    if (character === '<') {\n      const close = this.text.indexOf('>', this.position);\n      if (close < 0 || close >= this.end) return undefined;\n      this.position = close + 1;\n      return true;\n    }\n    if (character === '[') {\n      this.position += 1;\n      for (;;) {\n        this.skipWhitespace();\n        if (this.position >= this.end) return undefined;\n        if (this.text[this.position] === ']') {\n          this.position += 1;\n          return true;\n        }\n        if (this.readValue() === undefined) return undefined;\n      }\n    }\n    if (character === '(') return this.readLiteralString();\n    if (character === '/') return this.readName() === undefined ? undefined : true;\n    // A number, which may begin an indirect reference `N G R`, or a keyword.\n    const number = /^[+-]?(\\d+\\.?\\d*|\\.\\d+)/.exec(this.text.slice(this.position, Math.min(this.end, this.position + 32)));\n    if (number) {\n      this.position += number[0].length;\n      const reference = /^\\s+\\d+\\s+R(?![A-Za-z])/.exec(this.text.slice(this.position, Math.min(this.end, this.position + 32)));\n      if (reference && /^\\d+$/.test(number[0])) this.position += reference[0].length;\n      return true;\n    }\n    const keyword = /^[A-Za-z]+/.exec(this.text.slice(this.position, Math.min(this.end, this.position + 16)));\n    if (keyword) {\n      this.position += keyword[0].length;\n      return true;\n    }\n    return undefined;\n  }\n\n  private readLiteralString(): true | undefined {\n    let depth = 0;\n    while (this.position < this.end) {\n      const character = this.text[this.position]!;\n      if (character === '\\\\') {\n        this.position += 2;\n        continue;\n      }\n      if (character === '(') depth += 1;\n      if (character === ')') {\n        depth -= 1;\n        if (depth === 0) {\n          this.position += 1;\n          return true;\n        }\n      }\n      this.position += 1;\n    }\n    return undefined;\n  }\n}\n"]}

package/dist/esm/compliance/electronic-signatures/signature-request-evidence-files.backend.d.ts

@@ -1,10 +1,30 @@
 import type { LoggerService } from '../../monitoring/logger/services/logger.service';
 import type { FilesBackendService } from '../../files/services/files.backend.service';
 import type { ExecutionContextCreatorBackendService } from '../../runtime/services/execution-context-creator.backend.service';
+import type { RepositoriesRegistryHandlerBackendService } from '../../base-classes/services/repositories/repositories-registry-handler.backend.service';
 import type { ResourcesRegistryBackendService } from '../../resources/services/resources-registry.backend.service';
 import { type ServerProducedFileWriterDependencies } from '../../files/services/server-produced-file-writer.backend';
-/** How many times linking an evidence file to its SIGNED request is tried before it is logged as lost. */
-export declare const EVIDENCE_LINK_ATTEMPTS = 3;
+/**
+ * What one link of an evidence file to its SIGNED request did. Total over the file's states: the caller decides from it
+ * whether a later poll must try again.
+ */
+export declare enum SignatureRequestEvidenceLinkOutcome {
+    /** Linked now. */
+    LINKED = "linked",
+    /** Already linked to this request and field (a later poll's link, or an earlier one that succeeded). */
+    ALREADY_LINKED = "already_linked",
+    /** Not linkable yet: its scan (or its upload) has not ended. A later poll links it. */
+    NOT_YET_LINKABLE = "not_yet_linkable",
+    /** The link failed for a reason that may pass (the store could not be read or written). A later poll tries again. */
+    FAILED = "failed",
+    /**
+     * It can never be this request's: gone, or in a state no link leaves (infected, quarantined, failed, deleted, orphaned),
+     * or linked to another record. The request names evidence that is not kept.
+     */
+    LOST = "lost"
+}
+/** The outcomes a later poll must link again. */
+export declare const SIGNATURE_EVIDENCE_LINK_RETRIED: ReadonlySet<SignatureRequestEvidenceLinkOutcome>;
 /** The request's two evidence fields. */
 export declare enum SignatureRequestEvidenceField {
     /** The signed document the vendor returned. */
@@ -22,8 +42,8 @@ export interface SignatureRequestEvidenceFiles {
         readonly mimeType: string;
         readonly filename: string;
     }): Promise<string>;
-    /** Link a file the request names to it, so the teardown and the holds find it. Never throws. */
-    link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<void>;
+    /** Link a file the request names to it, so the teardown and the holds find it, and answer what happened. Never throws. */
+    link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<SignatureRequestEvidenceLinkOutcome>;
     /** Delete a file whose request move was lost. Never throws: an unlinked file is the cleanup's otherwise. */
     discard(fileId: string): Promise<void>;
 }
@@ -33,10 +53,14 @@ export declare class SignatureRequestEvidenceFilesBackendService implements Sign
     private readonly fileWriter;
     private readonly files;
     private readonly contexts;
+    /** The file's state, read as the inbound-email receiver reads its stored files: the infrastructure read, no access check. */
+    private readonly repositories;
     private readonly resources?;
-    constructor(logger: Pick<LoggerService, 'error' | 'warn'>, fileWriter: ServerProducedFileWriterDependencies, files: Pick<FilesBackendService, 'linkFileToResource' | 'deleteDetachedFile'>, contexts: Pick<ExecutionContextCreatorBackendService, 'createForInternalOperation'>, resources?: Pick<ResourcesRegistryBackendService, 'getServiceOperationPathDefault'>);
+    constructor(logger: Pick<LoggerService, 'warn'>, fileWriter: ServerProducedFileWriterDependencies, files: Pick<FilesBackendService, 'linkFileToResource' | 'deleteDetachedFile'>, contexts: Pick<ExecutionContextCreatorBackendService, 'createForInternalOperation'>, 
+    /** The file's state, read as the inbound-email receiver reads its stored files: the infrastructure read, no access check. */
+    repositories: Pick<RepositoriesRegistryHandlerBackendService, 'readUnscopedByKey'>, resources?: Pick<ResourcesRegistryBackendService, 'getServiceOperationPathDefault'>);
     write(input: Parameters<SignatureRequestEvidenceFiles['write']>[0]): Promise<string>;
-    link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<void>;
+    link(fileId: string, request: Readonly<Record<string, unknown>>, field: SignatureRequestEvidenceField): Promise<SignatureRequestEvidenceLinkOutcome>;
     discard(fileId: string): Promise<void>;
     /** The application's own context for these files, as a super-administrator would act (the relay's). */
     private internalContext;

package/dist/esm/compliance/electronic-signatures/signature-request-evidence-files.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signature-request-evidence-files.backend.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-evidence-files.backend.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,EAAmD,KAAK,oCAAoC,EAAE,MAAM,uEAAuE,CAAC;AAGnL,0GAA0G;AAC1G,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,yCAAyC;AACzC,oBAAY,6BAA6B;IACvC,+CAA+C;IAC/C,eAAe,mBAAmB;IAClC,0CAA0C;IAC1C,mBAAmB,uBAAuB;CAC3C;AAED,uHAAuH;AACvH,MAAM,WAAW,6BAA6B;IAC5C,0GAA0G;IAC1G,KAAK,CAAC,KAAK,EAAE;QACX,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;QAC9C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,gGAAgG;IAChG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtH,4GAA4G;IAC5G,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,0FAA0F;AAC1F,qBACa,2CAA4C,YAAW,6BAA6B;IAE1D,OAAO,CAAC,QAAQ,CAAC,MAAM;IACO,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAJvC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC,EACf,UAAU,EAAE,oCAAoC,EACjE,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,GAAG,oBAAoB,CAAC,EAC3D,QAAQ,EAAE,IAAI,CAAC,qCAAqC,EAAE,4BAA4B,CAAC,EACrF,SAAS,CAAC,EAAE,IAAI,CAAC,+BAA+B,EAAE,gCAAgC,CAAC;IAGhK,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBpF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBrH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5C,uGAAuG;IACvG,OAAO,CAAC,eAAe;CAQxB"}
+{"version":3,"file":"signature-request-evidence-files.backend.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-request-evidence-files.backend.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AACnG,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,qGAAqG,CAAC;AACrK,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,EAAmD,KAAK,oCAAoC,EAAE,MAAM,uEAAuE,CAAC;AAGnL;;;GAGG;AACH,oBAAY,mCAAmC;IAC7C,kBAAkB;IAClB,MAAM,WAAW;IACjB,wGAAwG;IACxG,cAAc,mBAAmB;IACjC,uFAAuF;IACvF,gBAAgB,qBAAqB;IACrC,qHAAqH;IACrH,MAAM,WAAW;IACjB;;;OAGG;IACH,IAAI,SAAS;CACd;AAED,iDAAiD;AACjD,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,mCAAmC,CAG3F,CAAC;AAKH,yCAAyC;AACzC,oBAAY,6BAA6B;IACvC,+CAA+C;IAC/C,eAAe,mBAAmB;IAClC,0CAA0C;IAC1C,mBAAmB,uBAAuB;CAC3C;AAED,uHAAuH;AACvH,MAAM,WAAW,6BAA6B;IAC5C,0GAA0G;IAC1G,KAAK,CAAC,KAAK,EAAE;QACX,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;QAC9C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,0HAA0H;IAC1H,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACrJ,4GAA4G;IAC5G,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,0FAA0F;AAC1F,qBACa,2CAA4C,YAAW,6BAA6B;IAE1D,OAAO,CAAC,QAAQ,CAAC,MAAM;IACO,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAC3F,6HAA6H;IAC9D,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBANvC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,EACL,UAAU,EAAE,oCAAoC,EACjE,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,oBAAoB,GAAG,oBAAoB,CAAC,EAC3D,QAAQ,EAAE,IAAI,CAAC,qCAAqC,EAAE,4BAA4B,CAAC;IACtK,6HAA6H;IAC7C,YAAY,EAAE,IAAI,CAAC,yCAAyC,EAAE,mBAAmB,CAAC,EACjF,SAAS,CAAC,EAAE,IAAI,CAAC,+BAA+B,EAAE,gCAAgC,CAAC;IAGhK,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAmBpF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,mCAAmC,CAAC;IAwBpJ,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5C,uGAAuG;IACvG,OAAO,CAAC,eAAe;CAQxB"}