alasio 7.0.0 → 9.0.0

package/dist/cli/src/manifests/log.js

@@ -0,0 +1,316 @@
+import { eventsTopic } from "../../../src/events/names.js";
+import { imageReference } from "../images.js";
+import { claimLabels, claimSpec, componentName, NAMESPACE, replicasOf, restrictedContainer, script, selectorLabels, sha256, stackLabels, stackPodSpec } from "./common.js";
+import { LOG_SEGMENT_BYTES, telemetryRetentionBytes } from "./config.js";
+import { replicaBudget, spread } from "./disruption.js";
+import { priority } from "./priorities.js";
+import { verticalPodAutoscaler } from "./sizing.js";
+/** The log's name: its StatefulSet's, its Service's, its ConfigMap's and its Secret's. */
+export const LOG = componentName("log");
+export const LOG_COMPONENT = "log";
+/** The ports of its clients, of its controllers, and of its metrics. */
+export const LOG_PORT = 9092;
+export const LOG_CONTROLLER_PORT = 9093;
+export const LOG_METRICS_PORT = 9464;
+/** The port its access applier answers whether it has applied what it applies on. */
+const ACCESS_PORT = 8080;
+/** The telemetry topics, by signal, which the gateway writes and the intake reads. */
+export const TELEMETRY_TOPICS = { traces: "otel.spans", logs: "otel.logs", metrics: "otel.metrics" };
+/**
+ * The largest record the log takes, as large as a minute's scrape of the stack in one export
+ * may be: one the lake's intake writes a part at a time, whatever its size (test/lake.test.ts
+ * proves one this large within a bound of its memory).
+ */
+export const LOG_RECORD_BYTES = 8 * 1024 * 1024;
+/** The consumer group of the lake's intake. */
+export const INTAKE_GROUP = "lake-intake";
+/**
+ * How long an environment's Telegram updates are kept: a week, so an environment asleep
+ * for one still finds them, beyond the day Telegram itself keeps what it could not deliver.
+ */
+export const TELEGRAM_RETENTION_MS = 7 * 86_400_000;
+/** An environment's name, as its topic, group and principal are named: main's, or its branch's. */
+export const environmentName = ({ branch }) => branch ?? "main";
+/** The topic of the Telegram updates of the environment `name`, which the webhook intake writes and its alasio reads. */
+export const telegramTopic = (name) => `telegram.${name}`;
+/** The principal the environment `name`'s alasio reaches the log as. */
+export const alasioPrincipal = (name) => `alasio-${name}`;
+/** The consumer group the environment `name`'s alasio reads its Telegram topic in. */
+export const alasioGroup = (name) => `alasio.${name}`;
+/** How long an environment's wake records are kept: a day, long past its lake loader's waking at the first. */
+export const WAKE_RETENTION_MS = 86_400_000;
+/** How long an environment's events are kept: as long as its Telegram updates, past any wait of its alasio's to read them. */
+export const EVENTS_RETENTION_MS = TELEGRAM_RETENTION_MS;
+/** The topic the environment `name`'s alasio writes as it commits transcripts, which wakes its lake loader. */
+export const lakeWakeTopic = (name) => `lake.${name}`;
+/** The principal the environment `name`'s lake loader reaches the log as. */
+export const loaderPrincipal = (name) => `loader-${name}`;
+/** The consumer group the environment `name`'s lake loader reads its wake topic in. */
+export const loaderGroup = (name) => `lake-loader.${name}`;
+/**
+ * What the log gives the environment `name`: a principal for each of its components that
+ * reaches the log, each with what it may do alone, and the topics they use, made and
+ * forgotten with the environment. Its alasio's, `alasio-<name>`, reading its Telegram
+ * topic in its group, `alasio.<name>`, and writing its wake topic, `lake.<name>`, as it
+ * commits transcripts; its lake loader's, `loader-<name>`, reading the wake topic in its
+ * group, `lake-loader.<name>`; and its events topic, `events.<name>` (src/events/), which the
+ * gateways write and its alasio reads in its group; those topics, of one partition each, as
+ * one alasio and one loader read them, a chat's updates in order, each keeping a segment
+ * beside the one it writes at most: a week of a bot's updates, or of events, and a day of
+ * wakes, is kilobytes. Each update, and each event, is flushed to the volume as it is
+ * written, as what told of it does not tell again; a wake, lost, costs nothing.
+ */
+export function environmentAccess(name) {
+    const topic = telegramTopic(name);
+    const wake = lakeWakeTopic(name);
+    const events = eventsTopic(name);
+    return {
+        principals: [
+            {
+                name: alasioPrincipal(name),
+                acls: [
+                    { resource: "topic", name: topic, pattern: "literal", operations: ["read", "describe"] },
+                    { resource: "group", name: alasioGroup(name), pattern: "literal", operations: ["read"] },
+                    { resource: "topic", name: wake, pattern: "literal", operations: ["write", "describe"] },
+                    { resource: "topic", name: events, pattern: "literal", operations: ["read", "describe"] },
+                ],
+            },
+            {
+                name: loaderPrincipal(name),
+                acls: [{ resource: "topic", name: wake, pattern: "literal", operations: ["read", "describe"] }, { resource: "group", name: loaderGroup(name), pattern: "literal", operations: ["read"] }],
+            },
+        ],
+        topics: [
+            // Each update flushed to the volume as it is written: Telegram, answered once the log has it, sends it no more.
+            { name: topic, partitions: 1, retentionMs: TELEGRAM_RETENTION_MS, retentionBytes: LOG_SEGMENT_BYTES, configs: { "flush.messages": "1" } },
+            { name: wake, partitions: 1, retentionMs: WAKE_RETENTION_MS, retentionBytes: LOG_SEGMENT_BYTES, configs: {} },
+            { name: events, partitions: 1, retentionMs: EVENTS_RETENTION_MS, retentionBytes: LOG_SEGMENT_BYTES, configs: { "flush.messages": "1" } },
+        ],
+    };
+}
+/** The log's brokers, as a client anywhere in the cluster bootstraps from them. */
+export const LOG_BROKERS = `${LOG}.${NAMESPACE}.svc:${LOG_PORT}`;
+/** The Secret of the principal `principal`'s name and password, which the stack's setup writes. */
+export const logPrincipalSecret = (principal) => componentName(`log-${principal}`);
+/**
+ * The Secret of the principal the alasio of `environment` reads its topic as, in its
+ * namespace: main's, which the stack's setup writes; a branch environment's, which alasio's
+ * command line writes as it makes the branch's principal.
+ */
+export const environmentLogSecret = ({ branch }) => (branch === null ? logPrincipalSecret("alasio-main") : componentName("log-alasio"));
+/** The Secret of the principal the lake loader of `environment` reads its wake topic as, in its namespace: main's, which the stack's setup writes; a branch environment's, which alasio's command line writes. */
+export const loaderLogSecret = ({ branch }) => (branch === null ? logPrincipalSecret("loader-main") : componentName("log-loader"));
+/** A node's address, by its ordinal: its pod's name in the log's headless Service. */
+const nodeAddress = (ordinal) => `${LOG}-${ordinal}.${LOG}.${NAMESPACE}.svc`;
+/** The hours of a retention as log.retention says it. */
+export const retentionMs = (retention) => Number(retention.slice(0, -1)) * 3_600_000;
+/**
+ * What the log's access is: the telemetry topics, of as many partitions as the intake
+ * runs replicas at most, so each has one to read, each partition keeping its share of the
+ * volume at most (telemetryRetentionBytes), each flushed to its volume within a second
+ * (flush.ms), and each kept compressed with zstd (compression.type), as the gateway
+ * produces it, whatever produces it: an export of OTLP's protobuf repeats its resources'
+ * and attributes' text, which compresses to a fraction of it, so a partition's share
+ * holds the retention's hours of what the stack sends; the gateway's writing them, the intake's reading them in its group, and
+ * KEDA's reading how far the group is behind on them, and each environment's lake loader on
+ * its wake topic, which asks to describe both and to read neither; the webhook intake's
+ * writing every environment's Telegram topic, a branch's among them, and nothing else; the
+ * sandbox gateway's writing every environment's events topic, and nothing else; and main's
+ * environment's principals and topics (environmentAccess).
+ *
+ * A write is acknowledged once a majority of the nodes have it in their page caches, not
+ * on their volumes. On one node, the volume outlives the pod, so a restart of the pod loses
+ * nothing acknowledged, but a crash of its host loses what the node had not flushed: up
+ * to a second of acknowledged telemetry, as its log flusher looks each second for what is
+ * older than flush.ms (log.flush.scheduler.interval.ms, serverProperties), and a flush a
+ * second costs next to nothing at the rate the stack writes it; and nothing of Telegram's
+ * updates, each flushed as it is written (flush.messages), as Telegram has had its answer.
+ * On three, each record is on two hosts before it is acknowledged, so a host's crash loses
+ * none.
+ */
+export function logAccess(config) {
+    const partitions = Math.max(1, config.lake.intake.scaling.max);
+    const telemetry = { resource: "topic", name: "otel.", pattern: "prefixed" };
+    const group = { resource: "group", name: INTAKE_GROUP, pattern: "literal" };
+    const main = environmentAccess("main");
+    const services = {
+        gateway: [{ ...telemetry, operations: ["write", "describe"] }],
+        intake: [{ ...telemetry, operations: ["read", "describe"] }, { ...group, operations: ["read"] }],
+        // And every environment's wake topic and its loader's group, which it reads how far behind on too.
+        scaler: [
+            { ...telemetry, operations: ["describe"] },
+            { ...group, operations: ["describe"] },
+            { resource: "topic", name: "lake.", pattern: "prefixed", operations: ["describe"] },
+            { resource: "group", name: "lake-loader.", pattern: "prefixed", operations: ["describe"] },
+        ],
+        webhook: [{ resource: "topic", name: "telegram.", pattern: "prefixed", operations: ["write", "describe"] }],
+        // Every environment's events, a branch's among them, and nothing else.
+        "sandbox-gateway": [{ resource: "topic", name: "events.", pattern: "prefixed", operations: ["write", "describe"] }],
+    };
+    const retention = { retentionMs: retentionMs(config.log.retention), retentionBytes: telemetryRetentionBytes(config) };
+    return {
+        topics: [...Object.values(TELEMETRY_TOPICS).map((name) => ({ name, partitions, ...retention, configs: { "flush.ms": "1000", "compression.type": "zstd" } })), ...main.topics],
+        principals: [...Object.entries(services).map(([name, acls]) => ({ name, acls })), ...main.principals],
+    };
+}
+/**
+ * Its nodes' configuration, whole: combined nodes, KRaft's voters every one of them; clients
+ * on SCRAM-SHA-512 and the controllers on a listener of their own; nothing allowed without an
+ * ACL but to its admin, and to what reaches the controllers' listener, its nodes alone;
+ * topics made by its access applier alone, each partition on every node, a write
+ * acknowledged once a majority of them has it, and flushed to its volume within a second
+ * where its topic says so (flush.ms), its log flusher looking each second, where it would
+ * look never by default; a record of up to 8 MiB, as a minute's
+ * scrape of the stack in one export may be; its segments on its volume, each closed within
+ * the hour or at LOG_SEGMENT_BYTES, so its retention, which deletes closed ones alone,
+ * reaches them in time; and a snapshot of its metadata every ten minutes where it changed,
+ * rather than every hour, so that a start replays little of it (src/log/access.ts says
+ * what a replay may lose). What differs from node to node (its id, its address, its
+ * admin's password) its start script adds (START).
+ */
+function serverProperties(config) {
+    const nodes = config.log.scaling.min;
+    const voters = Array.from({ length: nodes }, (_, ordinal) => `${ordinal}@${nodeAddress(ordinal)}:${LOG_CONTROLLER_PORT}`);
+    const majority = Math.floor(nodes / 2) + 1;
+    return script("process.roles=broker,controller", `controller.quorum.voters=${voters.join(",")}`, `listeners=CLIENT://:${LOG_PORT},CONTROLLER://:${LOG_CONTROLLER_PORT}`, "listener.security.protocol.map=CLIENT:SASL_PLAINTEXT,CONTROLLER:PLAINTEXT", "inter.broker.listener.name=CLIENT", "controller.listener.names=CONTROLLER", "sasl.enabled.mechanisms=SCRAM-SHA-512", "sasl.mechanism.inter.broker.protocol=SCRAM-SHA-512", "authorizer.class.name=org.apache.kafka.metadata.authorizer.StandardAuthorizer", 
+    // ANONYMOUS is what reaches the controllers' listener, unauthenticated: the NetworkPolicy, admitting its port from the log's own pods alone, is its guard.
+    "super.users=User:admin;User:ANONYMOUS", "allow.everyone.if.no.acl.found=false", "auto.create.topics.enable=false", `default.replication.factor=${nodes}`, `offsets.topic.replication.factor=${nodes}`, `transaction.state.log.replication.factor=${nodes}`, `min.insync.replicas=${majority}`, `transaction.state.log.min.isr=${majority}`, "log.dirs=/data/log", `log.retention.ms=${retentionMs(config.log.retention)}`, `log.segment.bytes=${LOG_SEGMENT_BYTES}`, "log.roll.ms=3600000", `message.max.bytes=${LOG_RECORD_BYTES}`, "log.flush.scheduler.interval.ms=1000", "metadata.log.max.snapshot.interval.ms=600000");
+}
+/** Its logging, to its output alone, rather than to files in its /tmp. */
+const LOG4J2 = script("rootLogger.level=INFO", "rootLogger.appenderRef.stdout.ref=STDOUT", "appender.stdout.type=Console", "appender.stdout.name=STDOUT", "appender.stdout.layout.type=PatternLayout", "appender.stdout.layout.pattern=[%d] %p %m (%c)%n");
+/**
+ * What its JMX exporter serves, of the MBeans it reads alone: how long its Produce requests
+ * take (p50 and p99, in ms), how many bytes each partition holds on its volume, and its
+ * broker's state (3 while it runs); and the JVM's own metrics.
+ */
+const METRICS = script("lowercaseOutputName: true", "includeObjectNames:", '  - "kafka.network:type=RequestMetrics,name=TotalTimeMs,request=Produce"', '  - "kafka.log:type=Log,name=Size,*"', '  - "kafka.server:type=KafkaServer,name=BrokerState"', "rules:", "  - pattern: 'kafka.network<type=RequestMetrics, name=TotalTimeMs, request=(.+)><>(50|99)thPercentile'", "    name: kafka_request_total_time_ms", "    type: GAUGE", '    labels: { request: "$1", percentile: "$2" }', "  - pattern: 'kafka.log<type=Log, name=Size, topic=(.+), partition=(.+)><>Value'", "    name: kafka_log_size_bytes", "    type: GAUGE", '    labels: { topic: "$1", partition: "$2" }', "  - pattern: 'kafka.server<type=KafkaServer, name=BrokerState><>Value'", "    name: kafka_server_broker_state", "    type: GAUGE");
+/**
+ * How a node starts, `format` or `serve`: its configuration written to /tmp, the log's,
+ * then its id (its pod's ordinal), its address, and the admin it reaches the other nodes
+ * as; then its volume formatted for the cluster's id, its admin made with KRaft's
+ * bootstrap, once (a formatted volume is left as it is); or it serves.
+ */
+const START = script("set -eu", 'ordinal="${HOSTNAME##*-}"', "{", "  cat /etc/log/server.properties", '  echo "node.id=$ordinal"', `  echo "advertised.listeners=CLIENT://$HOSTNAME.${LOG}.${NAMESPACE}.svc:${LOG_PORT}"`, '  echo "listener.name.client.scram-sha-512.sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username=\\"admin\\" password=\\"$LOG_ADMIN_PASSWORD\\";"', "} >/tmp/server.properties", 'case "$1" in', '  format) exec /opt/kafka/bin/kafka-storage.sh format --ignore-formatted -t "$KAFKA_CLUSTER_ID" -c /tmp/server.properties --add-scram "SCRAM-SHA-512=[name=admin,password=$LOG_ADMIN_PASSWORD]" ;;', "  serve) exec /opt/kafka/bin/kafka-server-start.sh /tmp/server.properties ;;", "esac");
+/** The log's objects: it always runs, Telegram's updates coming through it. */
+export function logObjects(config) {
+    const { log } = config;
+    const metadata = { name: LOG, namespace: NAMESPACE, labels: stackLabels(LOG_COMPONENT) };
+    const access = logAccess(config);
+    const data = {
+        "server.properties": serverProperties(config),
+        "log4j2.properties": LOG4J2,
+        "metrics.yaml": METRICS,
+        "start.sh": START,
+        "access.json": `${JSON.stringify(access, null, 2)}\n`,
+    };
+    const configMap = { apiVersion: "v1", kind: "ConfigMap", metadata, data };
+    // Headless, each node's address its pod's, which the others reach it by before it is ready, as KRaft's quorum forms.
+    const service = {
+        apiVersion: "v1",
+        kind: "Service",
+        metadata,
+        spec: {
+            clusterIP: "None",
+            publishNotReadyAddresses: true,
+            selector: selectorLabels(LOG_COMPONENT),
+            ports: [
+                { name: "client", port: LOG_PORT },
+                { name: "controller", port: LOG_CONTROLLER_PORT },
+                { name: "metrics", port: LOG_METRICS_PORT },
+            ],
+        },
+    };
+    const secret = (key) => ({ name: key, valueFrom: { secretKeyRef: { name: LOG, key } } });
+    const node = (name, command) => ({
+        name,
+        image: imageReference(config.images.log),
+        imagePullPolicy: config.images.pullPolicy,
+        command: ["/bin/sh", "/etc/log/start.sh", command],
+        securityContext: { ...restrictedContainer(), readOnlyRootFilesystem: true },
+    });
+    const mounts = [{ name: "config", mountPath: "/etc/log", readOnly: true }, { name: "tmp", mountPath: "/tmp" }, { name: "data", mountPath: "/data" }];
+    const common = [
+        secret("KAFKA_CLUSTER_ID"),
+        secret("LOG_ADMIN_PASSWORD"),
+        { name: "LOG_DIR", value: "/tmp/logs" },
+        { name: "KAFKA_LOG4J_OPTS", value: "-Dlog4j2.configurationFile=/etc/log/log4j2.properties" },
+    ];
+    const statefulSet = {
+        apiVersion: "apps/v1",
+        kind: "StatefulSet",
+        metadata,
+        spec: {
+            serviceName: LOG,
+            ...replicasOf(log.scaling),
+            // Every voter at once: a quorum of three forms only once two of them run.
+            podManagementPolicy: "Parallel",
+            selector: { matchLabels: selectorLabels(LOG_COMPONENT) },
+            template: {
+                metadata: { labels: stackLabels(LOG_COMPONENT), annotations: { "checksum/config": sha256(JSON.stringify(data)) } },
+                spec: {
+                    ...priority("bound"),
+                    ...stackPodSpec(config),
+                    ...spread(LOG_COMPONENT, log.scaling, true),
+                    // Its partitions closed cleanly as it stops, so it starts again without recovering them.
+                    terminationGracePeriodSeconds: 120,
+                    initContainers: [{
+                            ...node("format", "format"),
+                            env: [...common, { name: "KAFKA_HEAP_OPTS", value: "-Xmx256m" }],
+                            resources: { requests: { cpu: "50m", memory: "256Mi" }, limits: { memory: "512Mi" } },
+                            volumeMounts: mounts,
+                        }],
+                    containers: [
+                        {
+                            ...node("log", "serve"),
+                            env: [
+                                ...common,
+                                { name: "KAFKA_HEAP_OPTS", value: "-Xms512m -Xmx512m" },
+                                { name: "KAFKA_OPTS", value: `-javaagent:/opt/jmx-exporter/jmx_prometheus_javaagent.jar=${LOG_METRICS_PORT}:/etc/log/metrics.yaml` },
+                                // Without -loggc: no GC log files in /tmp.
+                                { name: "EXTRA_ARGS", value: "-name kafkaServer" },
+                            ],
+                            ports: [
+                                { name: "client", containerPort: LOG_PORT },
+                                { name: "controller", containerPort: LOG_CONTROLLER_PORT },
+                                { name: "metrics", containerPort: LOG_METRICS_PORT },
+                            ],
+                            startupProbe: { tcpSocket: { port: "client" }, periodSeconds: 5, failureThreshold: 120 },
+                            readinessProbe: { tcpSocket: { port: "client" }, periodSeconds: 10 },
+                            livenessProbe: { tcpSocket: { port: "client" }, periodSeconds: 30, failureThreshold: 4 },
+                            resources: log.resources,
+                            volumeMounts: mounts,
+                        },
+                        {
+                            name: "access",
+                            image: imageReference(config.images.alasio),
+                            imagePullPolicy: config.images.pullPolicy,
+                            command: ["node", "/opt/alasio/src/log/access.ts"],
+                            env: [
+                                { name: "LOG_BROKERS", value: `127.0.0.1:${LOG_PORT}` },
+                                // Every voter's, as KRaft's active controller alone writes a credential.
+                                { name: "LOG_CONTROLLERS", value: Array.from({ length: log.scaling.min }, (_, ordinal) => `${nodeAddress(ordinal)}:${LOG_CONTROLLER_PORT}`).join(",") },
+                                secret("LOG_ADMIN_PASSWORD"),
+                                { name: "LOG_ACCESS", value: "/etc/log/access.json" },
+                                { name: "LOG_PASSWORDS", value: "/etc/log-passwords" },
+                                { name: "LOG_ACCESS_PORT", value: String(ACCESS_PORT) },
+                            ],
+                            ports: [{ name: "access", containerPort: ACCESS_PORT }],
+                            readinessProbe: { httpGet: { path: "/readyz", port: "access" }, periodSeconds: 5 },
+                            securityContext: { ...restrictedContainer(), readOnlyRootFilesystem: true },
+                            resources: { requests: { cpu: "10m", memory: "64Mi" }, limits: { memory: "192Mi" } },
+                            volumeMounts: [{ name: "config", mountPath: "/etc/log", readOnly: true }, { name: "passwords", mountPath: "/etc/log-passwords", readOnly: true }],
+                        },
+                    ],
+                    volumes: [
+                        { name: "config", configMap: { name: LOG } },
+                        { name: "passwords", secret: { secretName: componentName("log-access") } },
+                        { name: "tmp", emptyDir: { sizeLimit: "1Gi" } },
+                    ],
+                },
+            },
+            volumeClaimTemplates: [{ metadata: { name: "data", labels: claimLabels(stackLabels(LOG_COMPONENT)) }, spec: claimSpec(log.storage) }],
+        },
+    };
+    return [configMap, service, statefulSet, ...replicaBudget(LOG_COMPONENT, NAMESPACE, log.scaling), verticalPodAutoscaler(statefulSet, "Recommended")];
+}
+//# sourceMappingURL=log.js.map

package/dist/cli/src/manifests/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../../../src/manifests/log.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAoB,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7L,OAAO,EAAsB,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AACnC,wEAAwE;AACxE,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAC7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,qFAAqF;AACrF,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAW,CAAC;AAE9G;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhD,+CAA+C;AAC/C,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,UAAU,CAAC;AAEpD,mGAAmG;AACnG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAE,MAAM,EAAe,EAAU,EAAE,CAAC,MAAM,IAAI,MAAM,CAAC;AAErF,yHAAyH;AACzH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC;AAC1E,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1E,sFAAsF;AACtF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;AAEtE,+GAA+G;AAC/G,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAC5C,8HAA8H;AAC9H,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAEzD,+GAA+G;AAC/G,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;AACtE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1E,uFAAuF;AACvF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC;AAE3E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO;QACL,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;gBAC3B,IAAI,EAAE;oBACJ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE;oBACxF,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE;oBACxF,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE;oBACxF,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE;iBAC1F;aACF;YACD;gBACE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;gBAC3B,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;aAC1L;SACF;QACD,MAAM,EAAE;YACN,gHAAgH;YAChH,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE;YACzI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7G,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE;SACzI;KACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAEjE,mGAAmG;AACnG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAuB,EAAU,EAAE,CAAC,aAAa,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC;AAEzG;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EAAE,MAAM,EAAe,EAAU,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;AAE7J,kNAAkN;AAClN,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAE,MAAM,EAAe,EAAU,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;AAExJ,sFAAsF;AACtF,MAAM,WAAW,GAAG,CAAC,OAAwB,EAAU,EAAE,CAAC,GAAG,GAAG,IAAI,OAAO,IAAI,GAAG,IAAI,SAAS,MAAM,CAAC;AA2CtG,yDAAyD;AACzD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;AAErG;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,SAAS,CAAC,MAAqB;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAW,CAAC;IACrF,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAW,CAAC;IACrF,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAA+E;QAC3F,OAAO,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,EAAE,CAAC,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QAChG,mGAAmG;QACnG,MAAM,EAAE;YACN,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE;YAC1C,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE;YACtC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE;YACnF,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE;SAC3F;QACD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3G,uEAAuE;QACvE,iBAAiB,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;KACpH,CAAC;IACF,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;IACtH,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7K,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;KACtG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,gBAAgB,CAAC,MAAqB;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAC1H,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,CACX,iCAAiC,EACjC,4BAA4B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAC9C,uBAAuB,QAAQ,kBAAkB,mBAAmB,EAAE,EACtE,2EAA2E,EAC3E,mCAAmC,EACnC,sCAAsC,EACtC,uCAAuC,EACvC,oDAAoD,EACpD,+EAA+E;IAC/E,2JAA2J;IAC3J,uCAAuC,EACvC,sCAAsC,EACtC,iCAAiC,EACjC,8BAA8B,KAAK,EAAE,EACrC,oCAAoC,KAAK,EAAE,EAC3C,4CAA4C,KAAK,EAAE,EACnD,uBAAuB,QAAQ,EAAE,EACjC,iCAAiC,QAAQ,EAAE,EAC3C,oBAAoB,EACpB,oBAAoB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EACvD,qBAAqB,iBAAiB,EAAE,EACxC,qBAAqB,EACrB,qBAAqB,gBAAgB,EAAE,EACvC,sCAAsC,EACtC,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,MAAM,GAAG,MAAM,CACnB,uBAAuB,EACvB,0CAA0C,EAC1C,8BAA8B,EAC9B,6BAA6B,EAC7B,2CAA2C,EAC3C,kDAAkD,CACnD,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,GAAG,MAAM,CACpB,2BAA2B,EAC3B,qBAAqB,EACrB,0EAA0E,EAC1E,sCAAsC,EACtC,sDAAsD,EACtD,QAAQ,EACR,wGAAwG,EACxG,uCAAuC,EACvC,iBAAiB,EACjB,iDAAiD,EACjD,kFAAkF,EAClF,gCAAgC,EAChC,iBAAiB,EACjB,8CAA8C,EAC9C,wEAAwE,EACxE,qCAAqC,EACrC,iBAAiB,CAClB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,KAAK,GAAG,MAAM,CAClB,SAAS,EACT,2BAA2B,EAC3B,GAAG,EACH,kCAAkC,EAClC,2BAA2B,EAC3B,mDAAmD,GAAG,IAAI,SAAS,QAAQ,QAAQ,GAAG,EACtF,wLAAwL,EACxL,2BAA2B,EAC3B,cAAc,EACd,oMAAoM,EACpM,8EAA8E,EAC9E,MAAM,CACP,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IACvB,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;IACzF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG;QACX,mBAAmB,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC7C,mBAAmB,EAAE,MAAM;QAC3B,cAAc,EAAE,OAAO;QACvB,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;KACtD,CAAC;IACF,MAAM,SAAS,GAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvF,qHAAqH;IACrH,MAAM,OAAO,GAAc;QACzB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,SAAS;QACf,QAAQ;QACR,IAAI,EAAE;YACJ,SAAS,EAAE,MAAM;YACjB,wBAAwB,EAAE,IAAI;YAC9B,QAAQ,EAAE,cAAc,CAAC,aAAa,CAAC;YACvC,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE;gBACjD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE;aAC5C;SACF;KACF,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAA2F,EAAE,CAAC,CAAC;QACxI,IAAI;QACJ,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QACxC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;QACzC,OAAO,EAAE,CAAC,SAAS,EAAE,mBAAmB,EAAE,OAAO,CAAC;QAClD,eAAe,EAAE,EAAE,GAAG,mBAAmB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;KAC5E,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAe;QACzB,MAAM,CAAC,kBAAkB,CAAC;QAC1B,MAAM,CAAC,oBAAoB,CAAC;QAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE;QACvC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,uDAAuD,EAAE;KAC7F,CAAC;IACF,MAAM,WAAW,GAAkB;QACjC,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,aAAa;QACnB,QAAQ;QACR,IAAI,EAAE;YACJ,WAAW,EAAE,GAAG;YAChB,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;YAC1B,0EAA0E;YAC1E,mBAAmB,EAAE,UAAU;YAC/B,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,aAAa,CAAC,EAAE;YACxD,QAAQ,EAAE;gBACR,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE;gBAClH,IAAI,EAAE;oBACJ,GAAG,QAAQ,CAAC,OAAO,CAAC;oBACpB,GAAG,YAAY,CAAC,MAAM,CAAC;oBACvB,GAAG,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;oBAC3C,yFAAyF;oBACzF,6BAA6B,EAAE,GAAG;oBAClC,cAAc,EAAE,CAAC;4BACf,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;4BAC3B,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;4BAChE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;4BACrF,YAAY,EAAE,MAAM;yBACrB,CAAC;oBACF,UAAU,EAAE;wBACV;4BACE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;4BACvB,GAAG,EAAE;gCACH,GAAG,MAAM;gCACT,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,mBAAmB,EAAE;gCACvD,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,6DAA6D,gBAAgB,wBAAwB,EAAE;gCACpI,2CAA2C;gCAC3C,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,mBAAmB,EAAE;6BACnD;4BACD,KAAK,EAAE;gCACL,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE;gCAC3C,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE;gCAC1D,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE;6BACrD;4BACD,YAAY,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE;4BACxF,cAAc,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;4BACpE,aAAa,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE;4BACxF,SAAS,EAAE,GAAG,CAAC,SAAS;4BACxB,YAAY,EAAE,MAAM;yBACrB;wBACD;4BACE,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;4BAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;4BACzC,OAAO,EAAE,CAAC,MAAM,EAAE,+BAA+B,CAAC;4BAClD,GAAG,EAAE;gCACH,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,QAAQ,EAAE,EAAE;gCACvD,yEAAyE;gCACzE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gCACvJ,MAAM,CAAC,oBAAoB,CAAC;gCAC5B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,sBAAsB,EAAE;gCACrD,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE;gCACtD,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE;6BACxD;4BACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;4BACvD,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;4BAClF,eAAe,EAAE,EAAE,GAAG,mBAAmB,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;4BAC3E,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;4BACpF,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;yBAClJ;qBACF;oBACD,OAAO,EAAE;wBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;wBAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,EAAE,EAAE;wBAC1E,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;qBAChD;iBACF;aACF;YACD,oBAAoB,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;SACtI;KACF,CAAC;IACF,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,aAAa,CAAC,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AACvJ,CAAC"}