@yan162/changewayguard 6.8.25

package/dist/agent/behavior-detector.js

@@ -0,0 +1,559 @@
+/**
+ * Behavioral anomaly detector — runs at before_tool_call.
+ *
+ * Responsibilities:
+ *   1. Collect high-risk tool calls (file read, shell, web fetch) and send to Core
+ *   2. Record completed tool calls in the chain history
+ *   3. Core does all classification, signal computation, and risk decisions
+ *   4. Fail-open: if Core is unavailable, allow execution
+ */
+import { randomBytes } from "node:crypto";
+import { withChangewayOpenPrefix } from "./auth.js";
+import { sanitizeContent } from "./sanitizer.js";
+import { appendEngineLogLine } from "./engine-log-writer.js";
+import { createTraceId, sendSignedJsonRequest } from "./http-client.js";
+// =============================================================================
+// Tool Sets — used to decide whether to send a tool call to Core
+// =============================================================================
+export const FILE_READ_TOOLS = new Set([
+    "Read", "read_file", "read", "cat", "head", "tail", "view",
+    "get_file_contents", "open_file",
+]);
+export const SHELL_TOOLS = new Set([
+    "Bash", "bash", "shell", "run_command", "execute", "terminal",
+    "cmd", "powershell",
+]);
+export const WEB_FETCH_TOOLS = new Set([
+    "WebFetch", "web_fetch", "fetch", "http_request", "get_url",
+    "browser_navigate", "navigate",
+]);
+// =============================================================================
+// Param Sanitization
+// =============================================================================
+/** Module-level secret detection callback (set by BehaviorDetector) */
+let secretDetectionCallback = null;
+function sanitizeParams(params) {
+    const result = {};
+    const allRedactions = {};
+    for (const [key, value] of Object.entries(params)) {
+        const raw = typeof value === "string" ? value : JSON.stringify(value ?? "");
+        const sanitized = sanitizeContent(raw.slice(0, 500));
+        result[key] = sanitized.sanitized;
+        // Accumulate redaction types
+        if (sanitized.redactions) {
+            for (const [type, count] of Object.entries(sanitized.redactions)) {
+                allRedactions[type] = (allRedactions[type] ?? 0) + count;
+            }
+        }
+    }
+    // Report secret detections if any
+    if (Object.keys(allRedactions).length > 0 && secretDetectionCallback) {
+        secretDetectionCallback(allRedactions);
+    }
+    return result;
+}
+const MAX_SESSIONS = 200;
+const MAX_CHAIN_ENTRIES = 50;
+const ENGINE_LOG_PREFIX = "调用见微检测引擎";
+const MAX_ENGINE_LOG_CHARS = 12_000;
+export class BehaviorDetector {
+    sessions = new Map();
+    coreCredentials = null;
+    config;
+    log;
+    /** HTTP status codes we've already warned about — avoid log spam */
+    warnedStatuses = new Set();
+    /** Track if we've already notified about quota exceeded (avoid spam) */
+    quotaExceededNotified = false;
+    /** Callback for quota exceeded notification */
+    onQuotaExceeded = null;
+    /** Pending quota exceeded message to append to next tool result */
+    pendingQuotaMessage = null;
+    /** Callback for secret detection (business reporting) */
+    onSecretDetected = null;
+    formatEngineLogPayload(payload) {
+        try {
+            const text = typeof payload === "string" ? payload : JSON.stringify(payload);
+            if (text.length <= MAX_ENGINE_LOG_CHARS)
+                return text;
+            return `${text.slice(0, MAX_ENGINE_LOG_CHARS)}...<truncated>`;
+        }
+        catch {
+            return String(payload);
+        }
+    }
+    logEngineRequest(method, url, payload, traceId) {
+        const line = `${ENGINE_LOG_PREFIX} traceId：${traceId} 请求 ${method} ${url} 参数=${this.formatEngineLogPayload(payload)}`;
+        this.log.info(line);
+        appendEngineLogLine(line);
+    }
+    logEngineResponse(method, url, status, payload, traceId) {
+        const line = `${ENGINE_LOG_PREFIX} traceId：${traceId} 响应 ${method} ${url} status=${status} 参数=${this.formatEngineLogPayload(payload)}`;
+        this.log.info(line);
+        appendEngineLogLine(line);
+    }
+    logEngineError(method, url, err, traceId) {
+        const line = `${ENGINE_LOG_PREFIX} traceId：${traceId} 异常 ${method} ${url} 错误=${String(err)}`;
+        this.log.warn(line);
+        appendEngineLogLine(line);
+    }
+    constructor(config, log) {
+        this.config = config;
+        this.log = log;
+    }
+    setCredentials(creds) {
+        this.coreCredentials = creds;
+    }
+    /** Set callback for when quota is exceeded */
+    setOnQuotaExceeded(callback) {
+        this.onQuotaExceeded = callback;
+    }
+    /** Set callback for when secrets are detected in params (business reporting) */
+    setOnSecretDetected(callback) {
+        this.onSecretDetected = callback;
+        secretDetectionCallback = callback;
+    }
+    /** Reset quota exceeded notification flag (e.g., on new day) */
+    resetQuotaExceededNotification() {
+        this.quotaExceededNotified = false;
+        this.pendingQuotaMessage = null;
+    }
+    /** Get and clear pending quota message (for appending to tool results) */
+    consumePendingQuotaMessage() {
+        const msg = this.pendingQuotaMessage;
+        this.pendingQuotaMessage = null;
+        return msg;
+    }
+    setUserIntent(sessionKey, message) {
+        const state = this.getOrCreate(sessionKey);
+        if (!state.userIntent) {
+            state.userIntent = message.slice(0, 500);
+        }
+        state.recentUserMessages = [
+            ...state.recentUserMessages.slice(-4),
+            message.slice(0, 200),
+        ];
+    }
+    clearSession(sessionKey) {
+        this.sessions.delete(sessionKey);
+    }
+    /**
+     * Read-and-clear latest prompt block decision for a session.
+     * Used by message_sending to terminate output immediately when user input
+     * was classified as block.
+     */
+    consumePromptBlockDecision(sessionKey) {
+        const state = this.sessions.get(sessionKey);
+        if (!state?.promptScanDecision)
+            return null;
+        if (state.promptScanDecision.action !== "block")
+            return null;
+        const decision = state.promptScanDecision;
+        state.promptScanDecision = null;
+        return decision;
+    }
+    /**
+     * Read current prompt block decision without consuming it.
+     * Useful when upstream hooks need to render a risk message while preserving
+     * the block decision for downstream enforcement.
+     */
+    getPendingPromptBlockDecision(sessionKey) {
+        const state = this.sessions.get(sessionKey);
+        if (!state?.promptScanDecision)
+            return null;
+        if (state.promptScanDecision.action !== "block")
+            return null;
+        return state.promptScanDecision;
+    }
+    /**
+     * Read current prompt alert decision without consuming it.
+     * Alert remains pending until user explicitly confirms.
+     */
+    getPendingPromptAlertDecision(sessionKey) {
+        return this.sessions.get(sessionKey)?.pendingPromptAlert ?? null;
+    }
+    /**
+     * Confirm and clear pending prompt alert for a session.
+     */
+    confirmPendingPromptAlert(sessionKey) {
+        const state = this.sessions.get(sessionKey);
+        if (!state?.pendingPromptAlert)
+            return null;
+        const decision = state.pendingPromptAlert;
+        state.confirmedPromptReplay = state.pendingPromptAlertText;
+        state.pendingPromptAlert = null;
+        state.pendingPromptAlertText = null;
+        if (state.promptScanDecision?.action === "alert") {
+            state.promptScanDecision = null;
+        }
+        return decision;
+    }
+    consumeConfirmedPromptReplay(sessionKey) {
+        const state = this.sessions.get(sessionKey);
+        if (!state?.confirmedPromptReplay)
+            return null;
+        const prompt = state.confirmedPromptReplay;
+        state.confirmedPromptReplay = null;
+        return prompt;
+    }
+    /**
+     * Called at before_tool_call. Returns a block decision or undefined (allow).
+     *
+     * All tool calls are sent to Core to build a complete tool chain.
+     * If Core is unavailable, fail-open (allow).
+     */
+    async onBeforeToolCall(ctx, event) {
+        // No credentials → can't call Core → allow
+        if (!this.coreCredentials)
+            return undefined;
+        const state = this.getOrCreate(ctx.sessionKey);
+        // If latest user prompt was classified as block, short-circuit before tool execution.
+        const promptDecision = state.promptScanDecision;
+        if (promptDecision?.action === "block" && this.config.blockOnRisk) {
+            return {
+                block: true,
+                blockReason: `changewayGuard blocked user prompt [${promptDecision.riskLevel}]: ${promptDecision.explanation} ` +
+                    `(confidence: ${Math.round(promptDecision.confidence * 100)}%)`,
+            };
+        }
+        if (state.pendingPromptAlert) {
+            return {
+                block: true,
+                blockReason: `changewayGuard requires confirmation for alert prompt [${state.pendingPromptAlert.riskLevel}]: ` +
+                    `${state.pendingPromptAlert.explanation}`,
+            };
+        }
+        // Build pendingTool
+        const pendingTool = {
+            toolName: event.toolName,
+            params: sanitizeParams(event.params),
+        };
+        // Collect content injection findings (if any)
+        const contentFindings = state.contentInjectionFindings.length > 0
+            ? [...state.contentInjectionFindings]
+            : undefined;
+        // Call Core assess API
+        const req = {
+            agentId: this.coreCredentials.agentId,
+            sessionKey: ctx.sessionKey,
+            runId: state.runId,
+            userIntent: state.userIntent,
+            toolChain: state.completedChain,
+            pendingTool,
+            contentFindings,
+            context: {
+                messageHistoryLength: state.recentUserMessages.length,
+                recentUserMessages: state.recentUserMessages.slice(-3),
+            },
+            meta: {
+                pluginVersion: this.config.pluginVersion,
+                clientTimestamp: new Date().toISOString(),
+            },
+        };
+        const verdict = await this.callAssessApi(req);
+        // Fail-open: Core unavailable → allow
+        if (!verdict)
+            return undefined;
+        if (verdict.action === "block" && this.config.blockOnRisk) {
+            return {
+                block: true,
+                blockReason: `changewayGuard blocked [${verdict.riskLevel}]: ${verdict.explanation} ` +
+                    `(confidence: ${Math.round(verdict.confidence * 100)}%)`,
+                findings: verdict.findings,
+            };
+        }
+        if (verdict.action === "block" || verdict.action === "alert") {
+            this.log.warn(`Behavioral anomaly [${verdict.riskLevel}/${Math.round(verdict.confidence * 100)}%]: ${verdict.explanation}`);
+        }
+        return undefined;
+    }
+    /**
+     * Called at after_tool_call. Records the completed tool in the chain.
+     */
+    onAfterToolCall(ctx, event) {
+        const state = this.sessions.get(ctx.sessionKey);
+        if (!state)
+            return;
+        const resultStr = typeof event.result === "string" ? event.result : JSON.stringify(event.result ?? "");
+        const resultSizeBytes = Buffer.byteLength(resultStr, "utf-8");
+        let resultCategory = "empty";
+        if (event.error)
+            resultCategory = "error";
+        else if (resultSizeBytes > 100_000)
+            resultCategory = "text_large";
+        else if (resultSizeBytes > 0)
+            resultCategory = "text_small";
+        const entry = {
+            seq: state.nextSeq++,
+            toolName: event.toolName,
+            sanitizedParams: sanitizeParams(event.params),
+            outcome: event.error ? "error" : "success",
+            durationMs: event.durationMs ?? 0,
+            resultCategory,
+            resultSizeBytes,
+        };
+        state.completedChain.push(entry);
+        if (state.completedChain.length > MAX_CHAIN_ENTRIES) {
+            state.completedChain.shift();
+        }
+    }
+    /**
+     * Scan tool result content for injection patterns via Core API.
+     * Returns scan result or null if scan failed/unavailable.
+     */
+    async scanContent(sessionKey, toolName, content) {
+        if (!this.coreCredentials)
+            return null;
+        // Limit content size (max 100KB to avoid timeout)
+        const maxSize = 100 * 1024;
+        const truncatedContent = content.length > maxSize ? content.slice(0, maxSize) : content;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.config.assessTimeoutMs);
+        const url = withChangewayOpenPrefix(`${this.config.coreUrl}/api/v1/content/scan`);
+        const requestBody = {
+            content: truncatedContent,
+            toolName,
+            sessionKey,
+        };
+        const traceId = createTraceId();
+        try {
+            this.logEngineRequest("POST", url, requestBody, traceId);
+            const { response } = await sendSignedJsonRequest({
+                method: "POST",
+                url,
+                body: requestBody,
+                traceId,
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                const text = await response.text().catch(() => "");
+                this.logEngineResponse("POST", url, response.status, text || "<empty>", traceId);
+                return null;
+            }
+            const json = (await response.json());
+            this.logEngineResponse("POST", url, response.status, json, traceId);
+            if (!json.success || !json.data)
+                return null;
+            this.log.info(`Core content-scan: detected=${json.data.detected}, ` +
+                `${json.data.action ? `action=${json.data.action}, ` : ""}` +
+                `categories=[${json.data.categories.join(",")}], ` +
+                `findings=${json.data.findings.length}`);
+            return json.data;
+        }
+        catch (err) {
+            if (err.name !== "AbortError") {
+                this.logEngineError("POST", url, err, traceId);
+            }
+            return null;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    /**
+     * Scan raw user prompt content at message_received(user).
+     * Stores latest decision in session state for optional enforcement during before_tool_call.
+     */
+    async scanPrompt(sessionKey, prompt) {
+        if (!this.coreCredentials)
+            return null;
+        const state = this.getOrCreate(sessionKey);
+        // New user message starts a new prompt decision window.
+        state.promptScanDecision = null;
+        state.pendingPromptAlert = null;
+        state.pendingPromptAlertText = null;
+        state.confirmedPromptReplay = null;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.config.assessTimeoutMs);
+        // Keep payload bounded while preserving the raw user message for server-side detection.
+        const maxSize = 100 * 1024;
+        const truncatedPrompt = prompt.length > maxSize ? prompt.slice(0, maxSize) : prompt;
+        const req = {
+            agentId: this.coreCredentials.agentId,
+            sessionKey,
+            runId: state.runId,
+            prompt: truncatedPrompt,
+            role: "user",
+            source: "message_received",
+            context: {
+                messageHistoryLength: state.recentUserMessages.length,
+                recentUserMessages: state.recentUserMessages.slice(-3),
+                userIntent: state.userIntent,
+            },
+            meta: {
+                pluginVersion: this.config.pluginVersion,
+                clientTimestamp: new Date().toISOString(),
+            },
+        };
+        const url = withChangewayOpenPrefix(`${this.config.coreUrl}/api/v1/prompt/scan`);
+        const traceId = createTraceId();
+        try {
+            this.logEngineRequest("POST", url, req, traceId);
+            const { response } = await sendSignedJsonRequest({
+                method: "POST",
+                url,
+                body: req,
+                traceId,
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                const text = await response.text().catch(() => "");
+                this.logEngineResponse("POST", url, response.status, text || "<empty>", traceId);
+                return null;
+            }
+            const json = (await response.json());
+            this.logEngineResponse("POST", url, response.status, json, traceId);
+            if (!json.success || !json.data)
+                return null;
+            if (json.data.quotaExceeded) {
+                const info = {
+                    quotaExceeded: true,
+                    quotaUsed: json.data.quotaUsed ?? 0,
+                    quotaTotal: json.data.quotaTotal ?? 0,
+                    isAutonomous: json.data.isAutonomous ?? true,
+                    resetAt: json.data.resetAt ?? null,
+                    upgradeUrl: json.data.upgradeUrl ?? "",
+                    message: json.data.message ?? "Quota exceeded",
+                    recommendation: json.data.recommendation ?? "",
+                };
+                if (!this.pendingQuotaMessage) {
+                    this.pendingQuotaMessage = info;
+                }
+                return null;
+            }
+            const decision = json.data;
+            state.promptScanDecision = decision;
+            if (decision.action === "alert") {
+                state.pendingPromptAlert = decision;
+                state.pendingPromptAlertText = truncatedPrompt;
+            }
+            this.log.info(`Core prompt-scan: action=${decision.action}, ` +
+                `risk=${decision.riskLevel}, confidence=${Math.round(decision.confidence * 100)}%`);
+            return decision;
+        }
+        catch (err) {
+            if (err.name !== "AbortError") {
+                this.logEngineError("POST", url, err, traceId);
+            }
+            return null;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    // ── Private helpers ──────────────────────────────────────────────
+    getOrCreate(sessionKey) {
+        if (!this.sessions.has(sessionKey)) {
+            if (this.sessions.size >= MAX_SESSIONS) {
+                let oldest = null;
+                let oldestTime = Infinity;
+                for (const [key, state] of this.sessions) {
+                    if (state.startedAt < oldestTime) {
+                        oldestTime = state.startedAt;
+                        oldest = key;
+                    }
+                }
+                if (oldest)
+                    this.sessions.delete(oldest);
+            }
+            this.sessions.set(sessionKey, {
+                sessionKey,
+                runId: `run-${randomBytes(8).toString("hex")}`,
+                userIntent: "",
+                recentUserMessages: [],
+                promptScanDecision: null,
+                pendingPromptAlert: null,
+                pendingPromptAlertText: null,
+                confirmedPromptReplay: null,
+                completedChain: [],
+                nextSeq: 0,
+                contentInjectionFindings: [],
+                startedAt: Date.now(),
+            });
+        }
+        return this.sessions.get(sessionKey);
+    }
+    async callAssessApi(req) {
+        if (!this.coreCredentials)
+            return null;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.config.assessTimeoutMs);
+        const url = withChangewayOpenPrefix(`${this.config.coreUrl}/api/v1/behavior/assess`);
+        const traceId = createTraceId();
+        try {
+            this.logEngineRequest("POST", url, req, traceId);
+            const { response } = await sendSignedJsonRequest({
+                method: "POST",
+                url,
+                body: req,
+                traceId,
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                const text = await response.text().catch(() => "");
+                this.logEngineResponse("POST", url, response.status, text || "<empty>", traceId);
+                if (!this.warnedStatuses.has(response.status)) {
+                    this.warnedStatuses.add(response.status);
+                    if (response.status === 401) {
+                        this.log.warn("Platform: API key invalid or agent not found");
+                    }
+                    else if (response.status === 403) {
+                        this.log.warn(`Platform: access denied — visit ${this.config.coreUrl} for details`);
+                    }
+                    else {
+                        this.log.debug?.(`Platform: assess returned ${response.status}`);
+                    }
+                }
+                return null;
+            }
+            const json = (await response.json());
+            this.logEngineResponse("POST", url, response.status, json, traceId);
+            if (!json.success)
+                return null;
+            if (!json.data)
+                return null;
+            // Handle quota exceeded response
+            if (json.data.quotaExceeded) {
+                const info = {
+                    quotaExceeded: true,
+                    quotaUsed: json.data.quotaUsed ?? 0,
+                    quotaTotal: json.data.quotaTotal ?? 0,
+                    isAutonomous: json.data.isAutonomous ?? true,
+                    resetAt: json.data.resetAt ?? null,
+                    upgradeUrl: json.data.upgradeUrl ?? "",
+                    message: json.data.message ?? "Quota exceeded",
+                    recommendation: json.data.recommendation ?? "",
+                };
+                const isFirstNotify = !this.quotaExceededNotified;
+                this.log.warn(`Core: quota exceeded (${info.quotaUsed}/${info.quotaTotal}, ` +
+                    `autonomous=${info.isAutonomous}, firstNotify=${isFirstNotify})`);
+                // Always set pending message if there isn't one already
+                // This ensures the message gets through even if previous attempts failed
+                if (!this.pendingQuotaMessage) {
+                    this.pendingQuotaMessage = info;
+                    this.log.info("Core: stored pending quota message for next tool result");
+                }
+                // First time notification: trigger callback
+                if (isFirstNotify) {
+                    this.quotaExceededNotified = true;
+                    if (this.onQuotaExceeded) {
+                        this.onQuotaExceeded(info);
+                    }
+                }
+                // Return null to fail-open (allow execution, no detection)
+                return null;
+            }
+            return json.data;
+        }
+        catch (err) {
+            if (err.name !== "AbortError") {
+                this.logEngineError("POST", url, err, traceId);
+            }
+            return null;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=behavior-detector.js.map

package/dist/agent/behavior-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-detector.js","sourceRoot":"","sources":["../../agent/behavior-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAExE,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAEhF,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC1D,mBAAmB,EAAE,WAAW;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU;IAC7D,KAAK,EAAE,YAAY;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS;IAC3D,kBAAkB,EAAE,UAAU;CAC/B,CAAC,CAAC;AAqBH,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,uEAAuE;AACvE,IAAI,uBAAuB,GAA0D,IAAI,CAAC;AAE1F,SAAS,cAAc,CAAC,MAA+B;IACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC;QAClC,6BAA6B;QAC7B,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAI,KAAgB,CAAC;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IACD,kCAAkC;IAClC,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,uBAAuB,EAAE,CAAC;QACrE,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAkDD,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,iBAAiB,GAAG,UAAU,CAAC;AACrC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,MAAM,OAAO,gBAAgB;IACnB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,eAAe,GAA2B,IAAI,CAAC;IAC/C,MAAM,CAAkB;IACxB,GAAG,CAAS;IACpB,oEAAoE;IAC5D,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,wEAAwE;IAChE,qBAAqB,GAAG,KAAK,CAAC;IACtC,+CAA+C;IACvC,eAAe,GAAmC,IAAI,CAAC;IAC/D,mEAAmE;IAC3D,mBAAmB,GAA6B,IAAI,CAAC;IAC7D,yDAAyD;IACjD,gBAAgB,GAA0D,IAAI,CAAC;IAE/E,sBAAsB,CAAC,OAAgB;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;gBAAE,OAAO,IAAI,CAAC;YACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,gBAAgB,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,MAAc,EAAE,GAAW,EAAE,OAAgB,EAAE,OAAe;QACrF,MAAM,IAAI,GAAG,GAAG,iBAAiB,YAAY,OAAO,OAAO,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAEO,iBAAiB,CAAC,MAAc,EAAE,GAAW,EAAE,MAAc,EAAE,OAAgB,EAAE,OAAe;QACtG,MAAM,IAAI,GAAG,GAAG,iBAAiB,YAAY,OAAO,OAAO,MAAM,IAAI,GAAG,WAAW,MAAM,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAEO,cAAc,CAAC,MAAc,EAAE,GAAW,EAAE,GAAY,EAAE,OAAe;QAC/E,MAAM,IAAI,GAAG,GAAG,iBAAiB,YAAY,OAAO,OAAO,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,YAAY,MAAuB,EAAE,GAAW;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,cAAc,CAAC,KAA6B;QAC1C,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,8CAA8C;IAC9C,kBAAkB,CAAC,QAAwC;QACzD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED,gFAAgF;IAChF,mBAAmB,CAAC,QAA+D;QACjF,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACjC,uBAAuB,GAAG,QAAQ,CAAC;IACrC,CAAC;IAED,gEAAgE;IAChE,8BAA8B;QAC5B,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;QACnC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAClC,CAAC;IAED,0EAA0E;IAC1E,0BAA0B;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACrC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAChC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,aAAa,CAAC,UAAkB,EAAE,OAAe;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,kBAAkB,GAAG;YACzB,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACtB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,UAAkB;QAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,0BAA0B,CAAC,UAAkB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,6BAA6B,CAAC,UAAkB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC7D,OAAO,KAAK,CAAC,kBAAkB,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAAC,UAAkB;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,kBAAkB,IAAI,IAAI,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,yBAAyB,CAAC,UAAkB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,sBAAsB,CAAC;QAC3D,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACpC,IAAI,KAAK,CAAC,kBAAkB,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YACjD,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAClC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4BAA4B,CAAC,UAAkB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC;QAC3C,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA6C,EAC7C,KAA4D;QAE5D,2CAA2C;QAC3C,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,SAAS,CAAC;QAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE/C,sFAAsF;QACtF,MAAM,cAAc,GAAG,KAAK,CAAC,kBAAkB,CAAC;QAChD,IAAI,cAAc,EAAE,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAClE,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,WAAW,EACT,uCAAuC,cAAc,CAAC,SAAS,MAAM,cAAc,CAAC,WAAW,GAAG;oBAClG,gBAAgB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI;aAClE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,WAAW,EACT,0DAA0D,KAAK,CAAC,kBAAkB,CAAC,SAAS,KAAK;oBACjG,GAAG,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE;aAC5C,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,WAAW,GAAoB;YACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;SACrC,CAAC;QAEF,8CAA8C;QAC9C,MAAM,eAAe,GAAG,KAAK,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC;YAC/D,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,wBAAwB,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QAEd,uBAAuB;QACvB,MAAM,GAAG,GAA0B;YACjC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO;YACrC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,cAAc;YAC/B,WAAW;YACX,eAAe;YACf,OAAO,EAAE;gBACP,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM;gBACrD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD;YACD,IAAI,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACxC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC1C;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAE9C,sCAAsC;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1D,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,WAAW,EACT,2BAA2B,OAAO,CAAC,SAAS,MAAM,OAAO,CAAC,WAAW,GAAG;oBACxE,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI;gBAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,uBAAuB,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,OAAO,OAAO,CAAC,WAAW,EAAE,CAC7G,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,eAAe,CACb,GAA2B,EAC3B,KAMC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE9D,IAAI,cAAc,GAAqC,OAAO,CAAC;QAC/D,IAAI,KAAK,CAAC,KAAK;YAAE,cAAc,GAAG,OAAO,CAAC;aACrC,IAAI,eAAe,GAAG,OAAO;YAAE,cAAc,GAAG,YAAY,CAAC;aAC7D,IAAI,eAAe,GAAG,CAAC;YAAE,cAAc,GAAG,YAAY,CAAC;QAE5D,MAAM,KAAK,GAAmB;YAC5B,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;YAC7C,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC1C,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;YACjC,cAAc;YACd,eAAe;SAChB,CAAC;QAEF,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACpD,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CACf,UAAkB,EAClB,QAAgB,EAChB,OAAe;QAEf,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAEvC,kDAAkD;QAClD,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3B,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAExF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG;YAClB,OAAO,EAAE,gBAAgB;YACzB,QAAQ;YACR,UAAU;SACX,CAAC;QACF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC;gBAC/C,MAAM,EAAE,MAAM;gBACd,GAAG;gBACH,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YACF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAEpE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE7C,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,+BAA+B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI;gBACrD,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3D,eAAe,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK;gBAClD,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CACxC,CAAC;YAEF,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,MAAc;QACjD,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE3C,wDAAwD;QACxD,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACpC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAEnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEhF,wFAAwF;QACxF,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3B,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAEpF,MAAM,GAAG,GAAsB;YAC7B,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO;YACrC,UAAU;YACV,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE;gBACP,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM;gBACrD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtD,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B;YACD,IAAI,EAAE;gBACJ,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACxC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC1C;SACF,CAAC;QACF,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC;gBAC/C,MAAM,EAAE,MAAM;gBACd,GAAG;gBACH,IAAI,EAAE,GAAG;gBACT,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YACF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAEpE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE7C,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAsB;oBAC9B,aAAa,EAAE,IAAI;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC;oBACnC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC;oBACrC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI;oBAC5C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI;oBAClC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;oBACtC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,gBAAgB;oBAC9C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE;iBAC/C,CAAC;gBAEF,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC9B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBAClC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YAC3B,KAAK,CAAC,kBAAkB,GAAG,QAAQ,CAAC;YACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAChC,KAAK,CAAC,kBAAkB,GAAG,QAAQ,CAAC;gBACpC,KAAK,CAAC,sBAAsB,GAAG,eAAe,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,4BAA4B,QAAQ,CAAC,MAAM,IAAI;gBAC/C,QAAQ,QAAQ,CAAC,SAAS,gBAAgB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CACnF,CAAC;YAEF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,oEAAoE;IAE5D,WAAW,CAAC,UAAkB;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;gBACvC,IAAI,MAAM,GAAkB,IAAI,CAAC;gBACjC,IAAI,UAAU,GAAG,QAAQ,CAAC;gBAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACzC,IAAI,KAAK,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;wBACjC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;wBAC7B,MAAM,GAAG,GAAG,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,IAAI,MAAM;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE;gBAC5B,UAAU;gBACV,KAAK,EAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC9C,UAAU,EAAE,EAAE;gBACd,kBAAkB,EAAE,EAAE;gBACtB,kBAAkB,EAAE,IAAI;gBACxB,kBAAkB,EAAE,IAAI;gBACxB,sBAAsB,EAAE,IAAI;gBAC5B,qBAAqB,EAAE,IAAI;gBAC3B,cAAc,EAAE,EAAE;gBAClB,OAAO,EAAE,CAAC;gBACV,wBAAwB,EAAE,EAAE;gBAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAA0B;QACpD,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC;gBAC/C,MAAM,EAAE,MAAM;gBACd,GAAG;gBACH,IAAI,EAAE,GAAG;gBACT,OAAO;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjF,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;oBAChE,CAAC;yBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAmC,IAAI,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;oBACtF,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,6BAA6B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YACF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAEpE,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE5B,iCAAiC;YACjC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAsB;oBAC9B,aAAa,EAAE,IAAI;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC;oBACnC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC;oBACrC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI;oBAC5C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI;oBAClC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;oBACtC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,gBAAgB;oBAC9C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE;iBAC/C,CAAC;gBAEF,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,yBAAyB,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI;oBAC9D,cAAc,IAAI,CAAC,YAAY,iBAAiB,aAAa,GAAG,CACjE,CAAC;gBAEF,wDAAwD;gBACxD,yEAAyE;gBACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC9B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;oBAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;gBAC3E,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;oBAClC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;wBACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;gBAED,2DAA2D;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}