clinkx 0.2.3 → 1.0.0

package/clinkx-workflows/dist/dashboard/auth/controller.js

@@ -0,0 +1,596 @@
+import { z } from "zod";
+import { DashboardChallengeCapacityError, DashboardChallengeStore, } from "./challenge-store.js";
+import { DashboardCredentialStore, } from "./credential-store.js";
+import { DashboardEnrollmentGate } from "./enrollment-gate.js";
+import { DashboardSessionStore } from "./session-store.js";
+import { DashboardWebAuthnService, } from "./webauthn-service.js";
+const SESSION_COOKIE_LOCAL_PREFIX = "clinkx_dash_session_p";
+const SESSION_COOKIE_SECURE = "__Host-clinkx_dash_session";
+const CHALLENGE_COOKIE_LOCAL_PREFIX = "clinkx_dash_challenge_p";
+const CHALLENGE_COOKIE_SECURE = "__Secure-clinkx_dash_challenge";
+const OPTIONS_BODY_MAX_BYTES = 4 * 1024;
+const VERIFY_BODY_MAX_BYTES = 256 * 1024;
+const DEFAULT_LOGIN_CHALLENGE_CAPACITY = 96;
+const DEFAULT_REGISTRATION_CHALLENGE_CAPACITY = 32;
+const DEFAULT_VERIFICATION_CAPACITY = 8;
+export const LOCAL_ORIGIN_PROOF_HEADER = "X-ClinkX-Local-Origin-Proof";
+const LOCAL_ORIGIN_PROOF_HEADER_LOWER = "x-clinkx-local-origin-proof";
+const EmptyBodySchema = z.object({}).strict();
+const TransportSchema = z.enum([
+    "ble",
+    "cable",
+    "hybrid",
+    "internal",
+    "nfc",
+    "smart-card",
+    "usb",
+]);
+const ClientExtensionsSchema = z.record(z.unknown());
+const RegistrationResponseSchema = z.object({
+    id: z.string().min(1),
+    rawId: z.string().min(1),
+    response: z.object({
+        clientDataJSON: z.string().min(1),
+        attestationObject: z.string().min(1),
+        transports: z.array(TransportSchema).optional(),
+        authenticatorData: z.string().optional(),
+        publicKey: z.string().optional(),
+        publicKeyAlgorithm: z.number().int().optional(),
+    }).strict(),
+    type: z.literal("public-key"),
+    clientExtensionResults: ClientExtensionsSchema,
+    authenticatorAttachment: z.enum(["cross-platform", "platform"]).optional(),
+}).strict();
+const AuthenticationResponseSchema = z.object({
+    id: z.string().min(1),
+    rawId: z.string().min(1),
+    response: z.object({
+        clientDataJSON: z.string().min(1),
+        authenticatorData: z.string().min(1),
+        signature: z.string().min(1),
+        userHandle: z.string().optional(),
+    }).strict(),
+    type: z.literal("public-key"),
+    clientExtensionResults: ClientExtensionsSchema,
+    authenticatorAttachment: z.enum(["cross-platform", "platform"]).optional(),
+}).strict();
+const RegisterVerifyBodySchema = z.object({
+    response: RegistrationResponseSchema,
+    label: z.string().trim().min(1).max(120).optional(),
+}).strict();
+const LoginVerifyBodySchema = z.object({
+    response: AuthenticationResponseSchema,
+}).strict();
+class DashboardAuthError extends Error {
+    status;
+    code;
+    headers;
+    constructor(status, code, headers) {
+        super(code);
+        this.status = status;
+        this.code = code;
+        this.headers = headers;
+    }
+}
+class FailFastDashboardVerificationGate {
+    #capacity;
+    #active = 0;
+    constructor(capacity) {
+        if (!Number.isSafeInteger(capacity) || capacity < 1) {
+            throw new Error("dashboard verification capacity must be a positive integer");
+        }
+        this.#capacity = capacity;
+    }
+    tryAcquire() {
+        if (this.#active >= this.#capacity)
+            return undefined;
+        this.#active += 1;
+        let released = false;
+        return () => {
+            if (released)
+                return;
+            released = true;
+            this.#active -= 1;
+        };
+    }
+}
+function sendJson(response, status, value, headers = {}) {
+    const body = `${JSON.stringify(value)}\n`;
+    response.writeHead(status, {
+        "Cache-Control": "no-store",
+        "Content-Type": "application/json; charset=utf-8",
+        ...headers,
+    });
+    response.end(body);
+}
+function authBusyError() {
+    return new DashboardAuthError(503, "auth_busy", { "Retry-After": "1" });
+}
+function createChallenge(store, value) {
+    try {
+        return store.create(value);
+    }
+    catch (error) {
+        if (error instanceof DashboardChallengeCapacityError) {
+            throw authBusyError();
+        }
+        throw error;
+    }
+}
+function singleDistinctHeader(request, name) {
+    const values = request.headersDistinct[name];
+    return values?.length === 1 ? values[0] : undefined;
+}
+function cookieMap(request) {
+    const values = request.headersDistinct.cookie;
+    if (values == null)
+        return new Map();
+    if (values.length !== 1)
+        return undefined;
+    const result = new Map();
+    for (const rawPair of (values[0] ?? "").split(";")) {
+        const pair = rawPair.trim();
+        if (pair === "")
+            continue;
+        const separator = pair.indexOf("=");
+        if (separator < 1)
+            return undefined;
+        const name = pair.slice(0, separator);
+        const value = pair.slice(separator + 1);
+        if (!/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(name)
+            || /[\u0000-\u001f\u007f;\s]/.test(value)
+            || result.has(name)) {
+            return undefined;
+        }
+        result.set(name, value);
+    }
+    return result;
+}
+function parseContentLength(request, maxBytes) {
+    const values = request.headersDistinct["content-length"];
+    if (values != null && values.length !== 1) {
+        throw new DashboardAuthError(400, "invalid_request");
+    }
+    const raw = values?.[0];
+    if (raw == null)
+        return;
+    if (!/^(0|[1-9]\d*)$/.test(raw)) {
+        throw new DashboardAuthError(400, "invalid_request");
+    }
+    const length = Number(raw);
+    if (!Number.isSafeInteger(length)) {
+        throw new DashboardAuthError(400, "invalid_request");
+    }
+    if (length > maxBytes) {
+        throw new DashboardAuthError(413, "payload_too_large");
+    }
+}
+async function readJsonBody(request, maxBytes, schema) {
+    const contentType = singleDistinctHeader(request, "content-type");
+    if (contentType == null || contentType.toLowerCase() !== "application/json") {
+        throw new DashboardAuthError(415, "unsupported_media_type");
+    }
+    parseContentLength(request, maxBytes);
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of request) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        total += bytes.byteLength;
+        if (total > maxBytes) {
+            request.resume();
+            throw new DashboardAuthError(413, "payload_too_large");
+        }
+        chunks.push(bytes);
+    }
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks));
+    }
+    catch {
+        throw new DashboardAuthError(400, "invalid_request");
+    }
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        throw new DashboardAuthError(400, "invalid_request");
+    }
+    const parsed = schema.safeParse(value);
+    if (!parsed.success) {
+        throw new DashboardAuthError(400, "invalid_request");
+    }
+    return parsed.data;
+}
+function sessionCookie(config, name, sessionId) {
+    return [
+        `${name}=${sessionId}`,
+        "HttpOnly",
+        "SameSite=Strict",
+        "Path=/",
+        ...(config.secureCookies ? ["Secure"] : []),
+    ].join("; ");
+}
+function clearSessionCookie(config, name) {
+    return [
+        `${name}=`,
+        "HttpOnly",
+        "SameSite=Strict",
+        "Path=/",
+        "Max-Age=0",
+        ...(config.secureCookies ? ["Secure"] : []),
+    ].join("; ");
+}
+function challengeCookie(config, name, challengeId) {
+    return [
+        `${name}=${challengeId}`,
+        "HttpOnly",
+        "SameSite=Strict",
+        "Path=/api/auth",
+        "Max-Age=120",
+        ...(config.secureCookies ? ["Secure"] : []),
+    ].join("; ");
+}
+function clearChallengeCookie(config, name) {
+    return [
+        `${name}=`,
+        "HttpOnly",
+        "SameSite=Strict",
+        "Path=/api/auth",
+        "Max-Age=0",
+        ...(config.secureCookies ? ["Secure"] : []),
+    ].join("; ");
+}
+function dashboardCookieNames(config) {
+    if (config.secureCookies) {
+        return {
+            challenge: CHALLENGE_COOKIE_SECURE,
+            session: SESSION_COOKIE_SECURE,
+        };
+    }
+    const match = /^http:\/\/localhost:([1-9]\d{0,4})$/.exec(config.expectedOrigin);
+    const port = match == null ? Number.NaN : Number(match[1]);
+    if (!Number.isSafeInteger(port) || port < 1 || port > 65_535) {
+        throw new Error("local dashboard cookie scope requires an explicit localhost port");
+    }
+    return {
+        challenge: `${CHALLENGE_COOKIE_LOCAL_PREFIX}${String(port)}`,
+        session: `${SESSION_COOKIE_LOCAL_PREFIX}${String(port)}`,
+    };
+}
+class DashboardPasskeyAuthController {
+    mode = "passkey";
+    expectedHost;
+    expectedOrigin;
+    #config;
+    #credentials;
+    #cookieNames;
+    #sessions;
+    #loginChallenges;
+    #registrationChallenges;
+    #verificationGate;
+    #webauthn;
+    #enrollment;
+    constructor(config, credentials, webauthn, options) {
+        this.#config = config;
+        this.expectedHost = config.expectedHost;
+        this.expectedOrigin = config.expectedOrigin;
+        this.#credentials = credentials;
+        this.#cookieNames = dashboardCookieNames(config);
+        this.#webauthn = webauthn;
+        this.#loginChallenges = new DashboardChallengeStore({
+            capacity: options.challengeCapacities?.login ?? DEFAULT_LOGIN_CHALLENGE_CAPACITY,
+        });
+        this.#registrationChallenges = new DashboardChallengeStore({
+            capacity: options.challengeCapacities?.registration
+                ?? DEFAULT_REGISTRATION_CHALLENGE_CAPACITY,
+        });
+        this.#verificationGate = options.verificationGate
+            ?? new FailFastDashboardVerificationGate(DEFAULT_VERIFICATION_CAPACITY);
+        this.#sessions = new DashboardSessionStore({
+            ttlMs: config.sessionTtlSeconds * 1000,
+        });
+        if (credentials.read().credentials.length === 0) {
+            this.#enrollment = DashboardEnrollmentGate.create();
+        }
+    }
+    takeEnrollmentCodeForDisplay() {
+        return this.#enrollment?.takeCodeForDisplay();
+    }
+    isAuthenticated(request) {
+        const sessionId = this.#sessionId(request);
+        return sessionId != null
+            && this.#sessions.has(sessionId, this.#localOriginProof(request));
+    }
+    async handle(route, request, response) {
+        try {
+            switch (route.name) {
+                case "status":
+                    this.#status(request, response);
+                    return;
+                case "register-options":
+                    await this.#registerOptions(request, response);
+                    return;
+                case "register-verify":
+                    await this.#registerVerify(request, response);
+                    return;
+                case "login-options":
+                    await this.#loginOptions(request, response);
+                    return;
+                case "login-verify":
+                    await this.#loginVerify(request, response);
+                    return;
+                case "logout":
+                    await this.#logout(request, response);
+                    return;
+            }
+        }
+        catch (error) {
+            if (error instanceof DashboardAuthError) {
+                sendJson(response, error.status, { error: { code: error.code } }, error.headers);
+                return;
+            }
+            sendJson(response, 500, { error: { code: "persistence_failed" } });
+        }
+    }
+    async close() {
+        this.#sessions.clear();
+        this.#loginChallenges.clear();
+        this.#registrationChallenges.clear();
+        await this.#credentials.close();
+    }
+    #sessionId(request) {
+        const cookies = cookieMap(request);
+        if (cookies == null)
+            return undefined;
+        const sessionId = cookies.get(this.#cookieNames.session);
+        return sessionId != null && /^[A-Za-z0-9_-]{43}$/.test(sessionId)
+            ? sessionId
+            : undefined;
+    }
+    #challengeId(request) {
+        const cookies = cookieMap(request);
+        const challengeId = cookies?.get(this.#cookieNames.challenge);
+        if (challengeId == null || !/^[A-Za-z0-9_-]{43}$/.test(challengeId)) {
+            throw new DashboardAuthError(400, "invalid_request");
+        }
+        return challengeId;
+    }
+    #localOriginProof(request) {
+        return this.#config.secureCookies
+            ? undefined
+            : singleDistinctHeader(request, LOCAL_ORIGIN_PROOF_HEADER_LOWER);
+    }
+    #requireSession(request) {
+        const sessionId = this.#sessionId(request);
+        if (sessionId == null
+            || !this.#sessions.has(sessionId, this.#localOriginProof(request))) {
+            throw new DashboardAuthError(401, "unauthorized");
+        }
+        return sessionId;
+    }
+    #enrollmentCode(request) {
+        const code = singleDistinctHeader(request, "x-enrollment-code");
+        if (code == null)
+            throw new DashboardAuthError(401, "unauthorized");
+        return code;
+    }
+    #status(request, response) {
+        sendJson(response, 200, {
+            enrolled: this.#credentials.read().credentials.length > 0,
+            authenticated: this.isAuthenticated(request),
+            mode: "passkey",
+        });
+    }
+    async #registerOptions(request, response) {
+        await readJsonBody(request, OPTIONS_BODY_MAX_BYTES, EmptyBodySchema);
+        const document = this.#credentials.read();
+        let enrollmentCode;
+        let authorization;
+        if (document.credentials.length === 0) {
+            const enrollment = this.#enrollment;
+            enrollmentCode = this.#enrollmentCode(request);
+            if (enrollment == null
+                || !enrollment.authorizes(enrollmentCode, enrollment.generation)) {
+                throw new DashboardAuthError(401, "unauthorized");
+            }
+            authorization = { kind: "enrollment", generation: enrollment.generation };
+        }
+        else {
+            authorization = { kind: "session", sessionId: this.#requireSession(request) };
+        }
+        const options = await this.#webauthn.registrationOptions({
+            userHandle: document.userHandle,
+            credentials: document.credentials,
+        });
+        const current = this.#credentials.read();
+        if (authorization.kind === "enrollment") {
+            const enrollment = this.#enrollment;
+            if (current.credentials.length !== 0
+                || enrollment == null
+                || enrollment.generation !== authorization.generation) {
+                throw new DashboardAuthError(409, "state_conflict");
+            }
+            if (enrollmentCode == null
+                || !enrollment.authorizes(enrollmentCode, authorization.generation)) {
+                throw new DashboardAuthError(401, "unauthorized");
+            }
+        }
+        else if (current.credentials.length === 0
+            || authorization.sessionId !== this.#requireSession(request)) {
+            throw new DashboardAuthError(401, "unauthorized");
+        }
+        const challengeId = createChallenge(this.#registrationChallenges, {
+            challenge: options.challenge,
+            purpose: { kind: "register", authorization },
+        });
+        sendJson(response, 200, options, {
+            "Set-Cookie": challengeCookie(this.#config, this.#cookieNames.challenge, challengeId),
+        });
+    }
+    async #registerVerify(request, response) {
+        const body = await readJsonBody(request, VERIFY_BODY_MAX_BYTES, RegisterVerifyBodySchema);
+        const releasePermit = this.#verificationGate.tryAcquire();
+        if (releasePermit == null)
+            throw authBusyError();
+        try {
+            const challenge = this.#registrationChallenges.consume(this.#challengeId(request), "register");
+            if (challenge == null || challenge.purpose.kind !== "register") {
+                throw new DashboardAuthError(400, "verification_failed");
+            }
+            const requestCode = challenge.purpose.authorization.kind === "enrollment"
+                ? this.#enrollmentCode(request)
+                : undefined;
+            await this.#credentials.mutate(async (current) => {
+                const firstEnrollment = current.credentials.length === 0;
+                if (challenge.purpose.kind !== "register") {
+                    throw new DashboardAuthError(400, "verification_failed");
+                }
+                if (challenge.purpose.authorization.kind === "enrollment") {
+                    const enrollment = this.#enrollment;
+                    if (!firstEnrollment
+                        || enrollment == null
+                        || enrollment.generation !== challenge.purpose.authorization.generation) {
+                        throw new DashboardAuthError(409, "state_conflict");
+                    }
+                    if (requestCode == null
+                        || !enrollment.authorizes(requestCode, enrollment.generation)) {
+                        throw new DashboardAuthError(401, "unauthorized");
+                    }
+                }
+                else if (firstEnrollment
+                    || challenge.purpose.authorization.sessionId
+                        !== this.#requireSession(request)) {
+                    throw new DashboardAuthError(401, "unauthorized");
+                }
+                let credential;
+                try {
+                    credential = await this.#webauthn.verifyRegistration(body.response, challenge.challenge);
+                }
+                catch {
+                    throw new DashboardAuthError(400, "verification_failed");
+                }
+                if (credential == null) {
+                    throw new DashboardAuthError(400, "verification_failed");
+                }
+                if (current.credentials.some(({ id }) => id === credential.id)) {
+                    throw new DashboardAuthError(409, "state_conflict");
+                }
+                const stored = body.label == null
+                    ? credential
+                    : { ...credential, label: body.label };
+                const next = {
+                    ...current,
+                    credentials: [...current.credentials, stored],
+                };
+                const enrollmentGeneration = firstEnrollment && challenge.purpose.authorization.kind === "enrollment"
+                    ? challenge.purpose.authorization.generation
+                    : undefined;
+                return {
+                    document: next,
+                    result: undefined,
+                    ...(enrollmentGeneration == null
+                        ? {}
+                        : {
+                            afterCommit: () => {
+                                if (!this.#enrollment?.seal(enrollmentGeneration)) {
+                                    throw new Error("dashboard enrollment seal failed");
+                                }
+                                this.#enrollment = undefined;
+                            },
+                        }),
+                };
+            });
+            sendJson(response, 200, { verified: true }, {
+                "Set-Cookie": clearChallengeCookie(this.#config, this.#cookieNames.challenge),
+            });
+        }
+        finally {
+            releasePermit();
+        }
+    }
+    async #loginOptions(request, response) {
+        await readJsonBody(request, OPTIONS_BODY_MAX_BYTES, EmptyBodySchema);
+        const credentials = this.#credentials.read().credentials;
+        if (credentials.length === 0) {
+            throw new DashboardAuthError(409, "not_enrolled");
+        }
+        const options = await this.#webauthn.authenticationOptions(credentials);
+        const challengeId = createChallenge(this.#loginChallenges, {
+            challenge: options.challenge,
+            purpose: { kind: "login" },
+        });
+        sendJson(response, 200, options, {
+            "Set-Cookie": challengeCookie(this.#config, this.#cookieNames.challenge, challengeId),
+        });
+    }
+    async #loginVerify(request, response) {
+        const body = await readJsonBody(request, VERIFY_BODY_MAX_BYTES, LoginVerifyBodySchema);
+        const releasePermit = this.#verificationGate.tryAcquire();
+        if (releasePermit == null)
+            throw authBusyError();
+        try {
+            const challenge = this.#loginChallenges.consume(this.#challengeId(request), "login");
+            if (challenge == null || challenge.purpose.kind !== "login") {
+                throw new DashboardAuthError(400, "verification_failed");
+            }
+            await this.#credentials.mutate(async (current) => {
+                const index = current.credentials.findIndex(({ id }) => id === body.response.id);
+                const credential = current.credentials[index];
+                if (credential == null) {
+                    throw new DashboardAuthError(400, "verification_failed");
+                }
+                let newCounter;
+                try {
+                    newCounter = await this.#webauthn.verifyAuthentication(body.response, challenge.challenge, credential);
+                }
+                catch {
+                    throw new DashboardAuthError(400, "verification_failed");
+                }
+                if (newCounter == null) {
+                    throw new DashboardAuthError(400, "verification_failed");
+                }
+                const credentials = [...current.credentials];
+                credentials[index] = { ...credential, counter: newCounter };
+                return {
+                    document: { ...current, credentials },
+                    result: undefined,
+                };
+            });
+            const session = this.#config.secureCookies
+                ? { sessionId: this.#sessions.create() }
+                : this.#sessions.createWithOriginProof();
+            sendJson(response, 200, {
+                verified: true,
+                ...("originProof" in session
+                    ? { originProof: session.originProof }
+                    : {}),
+            }, {
+                "Set-Cookie": [
+                    sessionCookie(this.#config, this.#cookieNames.session, session.sessionId),
+                    clearChallengeCookie(this.#config, this.#cookieNames.challenge),
+                ],
+            });
+        }
+        finally {
+            releasePermit();
+        }
+    }
+    async #logout(request, response) {
+        const sessionId = this.#requireSession(request);
+        await readJsonBody(request, OPTIONS_BODY_MAX_BYTES, EmptyBodySchema);
+        this.#sessions.delete(sessionId);
+        sendJson(response, 200, { loggedOut: true }, {
+            "Set-Cookie": clearSessionCookie(this.#config, this.#cookieNames.session),
+        });
+    }
+}
+export async function createDashboardPasskeyAuth(config, options = {}) {
+    dashboardCookieNames(config);
+    const credentials = await DashboardCredentialStore.open({
+        directory: config.credentialDirectory,
+        expectedRPID: config.expectedRPID,
+    });
+    return new DashboardPasskeyAuthController(config, credentials, options.webauthn ?? new DashboardWebAuthnService(config), options);
+}
+//# sourceMappingURL=controller.js.map

package/clinkx-workflows/dist/dashboard/auth/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/dashboard/auth/controller.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,wBAAwB,GAGzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AAC5D,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAC3D,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAChE,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;AACjE,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,CAAC;AACxC,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AACzC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAC5C,MAAM,uCAAuC,GAAG,EAAE,CAAC;AACnD,MAAM,6BAA6B,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AACvE,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAEtE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9C,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7B,KAAK;IACL,OAAO;IACP,QAAQ;IACR,UAAU;IACV,KAAK;IACL,YAAY;IACZ,KAAK;CACN,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAC/C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KAChD,CAAC,CAAC,MAAM,EAAE;IACX,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,sBAAsB,EAAE,sBAAsB;IAC9C,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3E,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC,CAAC,MAAM,EAAE;IACX,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,sBAAsB,EAAE,sBAAsB;IAC9C,uBAAuB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3E,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,0BAA0B;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,4BAA4B;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAeZ,MAAM,kBAAmB,SAAQ,KAAK;IAC3B,MAAM,CAAS;IACf,IAAI,CAAgB;IACpB,OAAO,CAAwC;IAExD,YACE,MAAc,EACd,IAAmB,EACnB,OAAmC;QAEnC,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAeD,MAAM,iCAAiC;IAC5B,SAAS,CAAS;IAC3B,OAAO,GAAG,CAAC,CAAC;IAEZ,YAAY,QAAgB;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACrD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC;CACF;AAgBD,SAAS,QAAQ,CACf,QAAwB,EACxB,MAAc,EACd,KAAc,EACd,UAAgE,EAAE;IAElE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,eAAe,EAAE,UAAU;QAC3B,cAAc,EAAE,iCAAiC;QACjD,GAAG,OAAO;KACX,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CACtB,KAA8B,EAC9B,KAA8B;IAE9B,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;YACrD,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAwB,EACxB,IAAY;IAEZ,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,OAAwB;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;IAC9C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACxC,IACE,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;eACzC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;eACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EACnB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAwB,EAAE,QAAgB;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;IACzD,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO;IACxB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAwB,EACxB,QAAgB,EAChB,MAAoB;IAEpB,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAClE,IAAI,WAAW,IAAI,IAAI,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,kBAAkB,EAAE,CAAC;QAC5E,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAC9D,CAAC;IACD,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CACpB,MAA2B,EAC3B,IAAY,EACZ,SAAiB;IAEjB,OAAO;QACL,GAAG,IAAI,IAAI,SAAS,EAAE;QACtB,UAAU;QACV,iBAAiB;QACjB,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA2B,EAC3B,IAAY;IAEZ,OAAO;QACL,GAAG,IAAI,GAAG;QACV,UAAU;QACV,iBAAiB;QACjB,QAAQ;QACR,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,MAA2B,EAC3B,IAAY,EACZ,WAAmB;IAEnB,OAAO;QACL,GAAG,IAAI,IAAI,WAAW,EAAE;QACxB,UAAU;QACV,iBAAiB;QACjB,gBAAgB;QAChB,aAAa;QACb,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA2B,EAC3B,IAAY;IAEZ,OAAO;QACL,GAAG,IAAI,GAAG;QACV,UAAU;QACV,iBAAiB;QACjB,gBAAgB;QAChB,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA2B;IAE3B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO;YACL,SAAS,EAAE,uBAAuB;YAClC,OAAO,EAAE,qBAAqB;SAC/B,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CACtD,MAAM,CAAC,cAAc,CACtB,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,GAAG,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE;QAC5D,OAAO,EAAE,GAAG,2BAA2B,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,8BAA8B;IACzB,IAAI,GAAG,SAAkB,CAAC;IAC1B,YAAY,CAAS;IACrB,cAAc,CAAS;IACvB,OAAO,CAAsB;IAC7B,YAAY,CAA2B;IACvC,YAAY,CAAmD;IAC/D,SAAS,CAAwB;IACjC,gBAAgB,CAA0B;IAC1C,uBAAuB,CAA0B;IACjD,iBAAiB,CAA4B;IAC7C,SAAS,CAAoB;IACtC,WAAW,CAAsC;IAEjD,YACE,MAA2B,EAC3B,WAAqC,EACrC,QAA2B,EAC3B,OAAoC;QAEpC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,uBAAuB,CAAC;YAClD,QAAQ,EACN,OAAO,CAAC,mBAAmB,EAAE,KAAK,IAAI,gCAAgC;SACzE,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,IAAI,uBAAuB,CAAC;YACzD,QAAQ,EACN,OAAO,CAAC,mBAAmB,EAAE,YAAY;mBACtC,uCAAuC;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB;eAC5C,IAAI,iCAAiC,CAAC,6BAA6B,CAAC,CAAC;QAC1E,IAAI,CAAC,SAAS,GAAG,IAAI,qBAAqB,CAAC;YACzC,KAAK,EAAE,MAAM,CAAC,iBAAiB,GAAG,IAAI;SACvC,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,4BAA4B;QAC1B,OAAO,IAAI,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAChD,CAAC;IAED,eAAe,CAAC,OAAwB;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,SAAS,IAAI,IAAI;eACnB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAyB,EACzB,OAAwB,EACxB,QAAwB;QAExB,IAAI,CAAC;YACH,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACX,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAChC,OAAO;gBACT,KAAK,kBAAkB;oBACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAC/C,OAAO;gBACT,KAAK,iBAAiB;oBACpB,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAC9C,OAAO;gBACT,KAAK,eAAe;oBAClB,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAC5C,OAAO;gBACT,KAAK,cAAc;oBACjB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAC3C,OAAO;gBACT,KAAK,QAAQ;oBACX,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACtC,OAAO;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,QAAQ,CACN,QAAQ,EACR,KAAK,CAAC,MAAM,EACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAC/B,KAAK,CAAC,OAAO,CACd,CAAC;gBACF,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,UAAU,CAAC,OAAwB;QACjC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,SAAS,IAAI,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC;YAC/D,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,YAAY,CAAC,OAAwB;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,WAAW,IAAI,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,iBAAiB,CAAC,OAAwB;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;YAC/B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IACrE,CAAC;IAED,eAAe,CAAC,OAAwB;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3C,IACE,SAAS,IAAI,IAAI;eACd,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAClE,CAAC;YACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,eAAe,CAAC,OAAwB;QACtC,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAChE,IAAI,IAAI,IAAI,IAAI;YAAE,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,OAAwB,EAAE,QAAwB;QACxD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YACtB,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACzD,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;YAC5C,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAwB,EACxB,QAAwB;QAExB,MAAM,YAAY,CAAC,OAAO,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,cAAkC,CAAC;QACvC,IAAI,aAEgD,CAAC;QACrD,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;YACpC,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC/C,IACE,UAAU,IAAI,IAAI;mBACf,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC,EAChE,CAAC;gBACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACpD,CAAC;YACD,aAAa,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;YACvD,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,aAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;YACpC,IACE,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;mBAC7B,UAAU,IAAI,IAAI;mBAClB,UAAU,CAAC,UAAU,KAAK,aAAa,CAAC,UAAU,EACrD,CAAC;gBACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YACtD,CAAC;YACD,IACE,cAAc,IAAI,IAAI;mBACnB,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,EAAE,aAAa,CAAC,UAAU,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;aAAM,IACL,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;eAC7B,aAAa,CAAC,SAAS,KAAK,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAC5D,CAAC;YACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,uBAAuB,EAAE;YAChE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE;SAC7C,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;YAC/B,YAAY,EAAE,eAAe,CAC3B,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,YAAY,CAAC,SAAS,EAC3B,WAAW,CACZ;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,OAAwB,EACxB,QAAwB;QAExB,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,OAAO,EACP,qBAAqB,EACrB,wBAAwB,CACzB,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;QAC1D,IAAI,aAAa,IAAI,IAAI;YAAE,MAAM,aAAa,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CACpD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAC1B,UAAU,CACX,CAAC;YACF,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/D,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,YAAY;gBACvE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;gBAC/B,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC/C,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC;gBACzD,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC1C,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;oBACpC,IACE,CAAC,eAAe;2BACb,UAAU,IAAI,IAAI;2BAClB,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,EACvE,CAAC;wBACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;oBACtD,CAAC;oBACD,IACE,WAAW,IAAI,IAAI;2BAChB,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,EAC7D,CAAC;wBACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;qBAAM,IACL,eAAe;uBACZ,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS;4BACtC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EACnC,CAAC;oBACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,UAAiD,CAAC;gBACtD,IAAI,CAAC;oBACH,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAClD,IAAI,CAAC,QAAoC,EACzC,SAAS,CAAC,SAAS,CACpB,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC/D,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,MAAM,GAA8B,IAAI,CAAC,KAAK,IAAI,IAAI;oBAC1D,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAgC;oBACxC,GAAG,OAAO;oBACV,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC9C,CAAC;gBACF,MAAM,oBAAoB,GACxB,eAAe,IAAI,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,YAAY;oBACtE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU;oBAC5C,CAAC,CAAC,SAAS,CAAC;gBAChB,OAAO;oBACL,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,SAAS;oBACjB,GAAG,CAAC,oBAAoB,IAAI,IAAI;wBAC9B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,WAAW,EAAE,GAAG,EAAE;gCAChB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;oCAClD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gCACtD,CAAC;gCACD,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;4BAC/B,CAAC;yBACF,CAAC;iBACP,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;gBAC1C,YAAY,EAAE,oBAAoB,CAChC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,YAAY,CAAC,SAAS,CAC5B;aACF,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAwB,EACxB,QAAwB;QAExB,MAAM,YAAY,CAAC,OAAO,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC;QACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,gBAAgB,EAAE;YACzD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;SAC3B,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;YAC/B,YAAY,EAAE,eAAe,CAC3B,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,YAAY,CAAC,SAAS,EAC3B,WAAW,CACZ;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,OAAwB,EACxB,QAAwB;QAExB,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,OAAO,EACP,qBAAqB,EACrB,qBAAqB,CACtB,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC;QAC1D,IAAI,aAAa,IAAI,IAAI;YAAE,MAAM,aAAa,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAC7C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAC1B,OAAO,CACR,CAAC;YACF,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5D,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CACrD,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CACxB,CAAC;gBACF,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,UAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,oBAAoB,CACpD,IAAI,CAAC,QAAsC,EAC3C,SAAS,CAAC,SAAS,EACnB,UAAU,CACX,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC7C,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBAC5D,OAAO;oBACL,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE;oBACrC,MAAM,EAAE,SAAS;iBAClB,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;gBACxC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE;gBACxC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC;YAC3C,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,QAAQ,EAAE,IAAI;gBACd,GAAG,CAAC,aAAa,IAAI,OAAO;oBAC1B,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;oBACtC,CAAC,CAAC,EAAE,CAAC;aACR,EAAE;gBACD,YAAY,EAAE;oBACZ,aAAa,CACX,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,YAAY,CAAC,OAAO,EACzB,OAAO,CAAC,SAAS,CAClB;oBACD,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;iBAChE;aACF,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAwB,EACxB,QAAwB;QAExB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,YAAY,CAAC,OAAO,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YAC3C,YAAY,EAAE,kBAAkB,CAC9B,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,YAAY,CAAC,OAAO,CAC1B;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA2B,EAC3B,UAAuC,EAAE;IAEzC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC;QACtD,SAAS,EAAE,MAAM,CAAC,mBAAmB;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,OAAO,IAAI,8BAA8B,CACvC,MAAM,EACN,WAAW,EACX,OAAO,CAAC,QAAQ,IAAI,IAAI,wBAAwB,CAAC,MAAM,CAAC,EACxD,OAAO,CACR,CAAC;AACJ,CAAC"}