clodds 1.1.0

package/dist/cli/secure.js

@@ -0,0 +1,626 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Server Security Hardening CLI
+ *
+ * Usage: clodds secure [options]
+ *
+ * Automatically applies security best practices:
+ * - SSH hardening (disable password auth, root login)
+ * - Firewall setup (ufw)
+ * - fail2ban installation
+ * - Automatic security updates
+ * - Kernel hardening (sysctl)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runSecure = runSecure;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const readline_1 = require("readline");
+// =============================================================================
+// HELPERS
+// =============================================================================
+const isRoot = () => process.getuid?.() === 0;
+const isLinux = () => (0, os_1.platform)() === 'linux';
+const isMac = () => (0, os_1.platform)() === 'darwin';
+function log(level, msg) {
+    const colors = {
+        info: '\x1b[36m', // cyan
+        warn: '\x1b[33m', // yellow
+        error: '\x1b[31m', // red
+        success: '\x1b[32m', // green
+    };
+    const icons = {
+        info: 'ℹ',
+        warn: '⚠',
+        error: '✖',
+        success: '✔',
+    };
+    console.log(`${colors[level]}${icons[level]} ${msg}\x1b[0m`);
+}
+function commandExists(cmd) {
+    try {
+        (0, child_process_1.execFileSync)('which', [cmd], { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function runCommand(cmd, args, options = {}) {
+    const { sudo = false, dryRun = false } = options;
+    const finalArgs = sudo && !isRoot() ? ['sudo', cmd, ...args] : [cmd, ...args];
+    const finalCmd = finalArgs[0];
+    const finalCmdArgs = finalArgs.slice(1);
+    if (dryRun) {
+        log('info', `[DRY RUN] Would execute: ${finalArgs.join(' ')}`);
+        return '';
+    }
+    try {
+        return (0, child_process_1.execFileSync)(finalCmd, finalCmdArgs, { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+    }
+    catch (err) {
+        const error = err;
+        throw new Error(error.stderr || error.message || 'Command failed');
+    }
+}
+function backupFile(path) {
+    if ((0, fs_1.existsSync)(path)) {
+        const backupPath = `${path}.backup.${Date.now()}`;
+        (0, fs_1.copyFileSync)(path, backupPath);
+        log('info', `Backed up ${path} to ${backupPath}`);
+    }
+}
+async function confirm(question) {
+    const rl = (0, readline_1.createInterface)({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => {
+        rl.question(`${question} (y/N): `, (answer) => {
+            rl.close();
+            resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
+        });
+    });
+}
+// =============================================================================
+// SSH HARDENING
+// =============================================================================
+function hardenSSH(options) {
+    log('info', '=== SSH Hardening ===');
+    const sshdConfig = '/etc/ssh/sshd_config';
+    if (!(0, fs_1.existsSync)(sshdConfig)) {
+        log('warn', 'SSH config not found, skipping SSH hardening');
+        return;
+    }
+    if (!options.dryRun) {
+        backupFile(sshdConfig);
+    }
+    let config = (0, fs_1.readFileSync)(sshdConfig, 'utf-8');
+    const changes = [];
+    // Disable password authentication
+    if (!/^PasswordAuthentication\s+no/m.test(config)) {
+        config = config.replace(/^#?PasswordAuthentication\s+.*/m, 'PasswordAuthentication no');
+        if (!/PasswordAuthentication/m.test(config)) {
+            config += '\nPasswordAuthentication no';
+        }
+        changes.push('Disabled password authentication');
+    }
+    // Disable root login
+    if (!/^PermitRootLogin\s+no/m.test(config)) {
+        config = config.replace(/^#?PermitRootLogin\s+.*/m, 'PermitRootLogin no');
+        if (!/PermitRootLogin/m.test(config)) {
+            config += '\nPermitRootLogin no';
+        }
+        changes.push('Disabled root login');
+    }
+    // Disable empty passwords
+    if (!/^PermitEmptyPasswords\s+no/m.test(config)) {
+        config = config.replace(/^#?PermitEmptyPasswords\s+.*/m, 'PermitEmptyPasswords no');
+        if (!/PermitEmptyPasswords/m.test(config)) {
+            config += '\nPermitEmptyPasswords no';
+        }
+        changes.push('Disabled empty passwords');
+    }
+    // Use SSH protocol 2 only
+    if (!/^Protocol\s+2/m.test(config)) {
+        config = config.replace(/^#?Protocol\s+.*/m, 'Protocol 2');
+        if (!/Protocol/m.test(config)) {
+            config += '\nProtocol 2';
+        }
+        changes.push('Enforced SSH Protocol 2');
+    }
+    // Limit authentication attempts
+    if (!/^MaxAuthTries\s+3/m.test(config)) {
+        config = config.replace(/^#?MaxAuthTries\s+.*/m, 'MaxAuthTries 3');
+        if (!/MaxAuthTries/m.test(config)) {
+            config += '\nMaxAuthTries 3';
+        }
+        changes.push('Limited auth attempts to 3');
+    }
+    // Set login grace time
+    if (!/^LoginGraceTime\s+60/m.test(config)) {
+        config = config.replace(/^#?LoginGraceTime\s+.*/m, 'LoginGraceTime 60');
+        if (!/LoginGraceTime/m.test(config)) {
+            config += '\nLoginGraceTime 60';
+        }
+        changes.push('Set login grace time to 60s');
+    }
+    // Change SSH port if specified
+    if (options.sshPort && options.sshPort !== 22) {
+        config = config.replace(/^#?Port\s+.*/m, `Port ${options.sshPort}`);
+        if (!/^Port\s+/m.test(config)) {
+            config += `\nPort ${options.sshPort}`;
+        }
+        changes.push(`Changed SSH port to ${options.sshPort}`);
+    }
+    if (changes.length === 0) {
+        log('success', 'SSH already hardened');
+        return;
+    }
+    for (const change of changes) {
+        log('info', `  ${change}`);
+    }
+    if (options.dryRun) {
+        log('info', '[DRY RUN] Would update SSH config');
+        return;
+    }
+    (0, fs_1.writeFileSync)(sshdConfig, config);
+    log('success', 'SSH config updated');
+    // Restart SSH service
+    try {
+        if (commandExists('systemctl')) {
+            runCommand('systemctl', ['restart', 'sshd'], { sudo: true });
+        }
+        else {
+            runCommand('service', ['ssh', 'restart'], { sudo: true });
+        }
+        log('success', 'SSH service restarted');
+    }
+    catch {
+        log('warn', 'Could not restart SSH service - manual restart may be needed');
+    }
+}
+// =============================================================================
+// FIREWALL SETUP
+// =============================================================================
+function setupFirewall(options) {
+    log('info', '=== Firewall Setup ===');
+    if (!isLinux()) {
+        log('warn', 'Firewall setup only supported on Linux');
+        return;
+    }
+    // Install ufw if not present
+    if (!commandExists('ufw')) {
+        log('info', 'Installing ufw...');
+        if (!options.dryRun) {
+            runCommand('apt-get', ['update'], { sudo: true });
+            runCommand('apt-get', ['install', '-y', 'ufw'], { sudo: true });
+        }
+    }
+    const sshPort = options.sshPort || 22;
+    const allowedPorts = options.allowedPorts || [sshPort, 80, 443];
+    // Ensure SSH port is always allowed
+    if (!allowedPorts.includes(sshPort)) {
+        allowedPorts.unshift(sshPort);
+    }
+    if (options.dryRun) {
+        log('info', `[DRY RUN] Would configure ufw:`);
+        log('info', `  - Default deny incoming`);
+        log('info', `  - Default allow outgoing`);
+        for (const port of allowedPorts) {
+            log('info', `  - Allow port ${port}`);
+        }
+        return;
+    }
+    // Reset and configure
+    runCommand('ufw', ['--force', 'reset'], { sudo: true });
+    runCommand('ufw', ['default', 'deny', 'incoming'], { sudo: true });
+    runCommand('ufw', ['default', 'allow', 'outgoing'], { sudo: true });
+    // Allow specified ports
+    for (const port of allowedPorts) {
+        runCommand('ufw', ['allow', port.toString()], { sudo: true });
+        log('info', `  Allowed port ${port}`);
+    }
+    // Enable firewall
+    runCommand('ufw', ['--force', 'enable'], { sudo: true });
+    log('success', 'Firewall configured and enabled');
+}
+// =============================================================================
+// FAIL2BAN SETUP
+// =============================================================================
+function setupFail2ban(options) {
+    log('info', '=== fail2ban Setup ===');
+    if (!isLinux()) {
+        log('warn', 'fail2ban setup only supported on Linux');
+        return;
+    }
+    // Install fail2ban if not present
+    if (!commandExists('fail2ban-client')) {
+        log('info', 'Installing fail2ban...');
+        if (!options.dryRun) {
+            runCommand('apt-get', ['update'], { sudo: true });
+            runCommand('apt-get', ['install', '-y', 'fail2ban'], { sudo: true });
+        }
+    }
+    const sshPort = options.sshPort || 22;
+    const jailConfig = `[DEFAULT]
+bantime = 3600
+findtime = 600
+maxretry = 3
+backend = systemd
+
+[sshd]
+enabled = true
+port = ${sshPort}
+filter = sshd
+logpath = /var/log/auth.log
+maxretry = 3
+bantime = 86400
+`;
+    const jailLocalPath = '/etc/fail2ban/jail.local';
+    if (options.dryRun) {
+        log('info', '[DRY RUN] Would create fail2ban config:');
+        log('info', `  - Ban time: 1 hour (24h for SSH)`);
+        log('info', `  - Max retries: 3`);
+        log('info', `  - SSH jail enabled on port ${sshPort}`);
+        return;
+    }
+    backupFile(jailLocalPath);
+    (0, fs_1.writeFileSync)(jailLocalPath, jailConfig);
+    log('info', 'Created fail2ban jail config');
+    // Restart fail2ban
+    try {
+        runCommand('systemctl', ['restart', 'fail2ban'], { sudo: true });
+        runCommand('systemctl', ['enable', 'fail2ban'], { sudo: true });
+        log('success', 'fail2ban configured and enabled');
+    }
+    catch {
+        log('warn', 'Could not restart fail2ban - manual restart may be needed');
+    }
+}
+// =============================================================================
+// AUTOMATIC UPDATES
+// =============================================================================
+function setupAutoUpdates(options) {
+    log('info', '=== Automatic Security Updates ===');
+    if (!isLinux()) {
+        log('warn', 'Auto-updates setup only supported on Linux');
+        return;
+    }
+    // Install unattended-upgrades
+    if (!(0, fs_1.existsSync)('/etc/apt/apt.conf.d/50unattended-upgrades')) {
+        log('info', 'Installing unattended-upgrades...');
+        if (!options.dryRun) {
+            runCommand('apt-get', ['update'], { sudo: true });
+            runCommand('apt-get', ['install', '-y', 'unattended-upgrades'], { sudo: true });
+        }
+    }
+    const autoUpgradeConfig = `APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";
+APT::Periodic::AutocleanInterval "7";
+`;
+    const configPath = '/etc/apt/apt.conf.d/20auto-upgrades';
+    if (options.dryRun) {
+        log('info', '[DRY RUN] Would enable automatic security updates');
+        return;
+    }
+    (0, fs_1.writeFileSync)(configPath, autoUpgradeConfig);
+    log('success', 'Automatic security updates enabled');
+}
+// =============================================================================
+// KERNEL HARDENING
+// =============================================================================
+function hardenKernel(options) {
+    log('info', '=== Kernel Hardening ===');
+    if (!isLinux()) {
+        log('warn', 'Kernel hardening only supported on Linux');
+        return;
+    }
+    const sysctlConfig = `# Clodds Security Hardening
+# IP Spoofing protection
+net.ipv4.conf.all.rp_filter = 1
+net.ipv4.conf.default.rp_filter = 1
+
+# Ignore ICMP broadcast requests
+net.ipv4.icmp_echo_ignore_broadcasts = 1
+
+# Disable source packet routing
+net.ipv4.conf.all.accept_source_route = 0
+net.ipv6.conf.all.accept_source_route = 0
+net.ipv4.conf.default.accept_source_route = 0
+net.ipv6.conf.default.accept_source_route = 0
+
+# Ignore send redirects
+net.ipv4.conf.all.send_redirects = 0
+net.ipv4.conf.default.send_redirects = 0
+
+# Block SYN attacks
+net.ipv4.tcp_syncookies = 1
+net.ipv4.tcp_max_syn_backlog = 2048
+net.ipv4.tcp_synack_retries = 2
+net.ipv4.tcp_syn_retries = 5
+
+# Log Martians
+net.ipv4.conf.all.log_martians = 1
+net.ipv4.icmp_ignore_bogus_error_responses = 1
+
+# Ignore ICMP redirects
+net.ipv4.conf.all.accept_redirects = 0
+net.ipv6.conf.all.accept_redirects = 0
+net.ipv4.conf.default.accept_redirects = 0
+net.ipv6.conf.default.accept_redirects = 0
+
+# Disable IPv6 if not needed (uncomment if desired)
+# net.ipv6.conf.all.disable_ipv6 = 1
+# net.ipv6.conf.default.disable_ipv6 = 1
+
+# Protect against time-wait assassination
+net.ipv4.tcp_rfc1337 = 1
+`;
+    const sysctlPath = '/etc/sysctl.d/99-clodds-security.conf';
+    if (options.dryRun) {
+        log('info', '[DRY RUN] Would apply kernel hardening:');
+        log('info', '  - IP spoofing protection');
+        log('info', '  - SYN flood protection');
+        log('info', '  - ICMP hardening');
+        log('info', '  - Disable source routing');
+        return;
+    }
+    backupFile(sysctlPath);
+    (0, fs_1.writeFileSync)(sysctlPath, sysctlConfig);
+    // Apply sysctl settings
+    try {
+        runCommand('sysctl', ['--system'], { sudo: true });
+        log('success', 'Kernel hardening applied');
+    }
+    catch {
+        log('warn', 'Could not apply sysctl settings - reboot may be needed');
+    }
+}
+// =============================================================================
+// SECURITY AUDIT
+// =============================================================================
+function runSecurityAudit() {
+    log('info', '=== Security Audit ===\n');
+    const checks = [];
+    // Check SSH config
+    if ((0, fs_1.existsSync)('/etc/ssh/sshd_config')) {
+        const sshConfig = (0, fs_1.readFileSync)('/etc/ssh/sshd_config', 'utf-8');
+        checks.push({
+            name: 'SSH Password Auth',
+            status: /^PasswordAuthentication\s+no/m.test(sshConfig) ? 'pass' : 'fail',
+            message: /^PasswordAuthentication\s+no/m.test(sshConfig) ? 'Disabled' : 'Enabled (should be disabled)',
+        });
+        checks.push({
+            name: 'SSH Root Login',
+            status: /^PermitRootLogin\s+no/m.test(sshConfig) ? 'pass' : 'fail',
+            message: /^PermitRootLogin\s+no/m.test(sshConfig) ? 'Disabled' : 'Enabled (should be disabled)',
+        });
+        const portMatch = sshConfig.match(/^Port\s+(\d+)/m);
+        const sshPort = portMatch ? parseInt(portMatch[1]) : 22;
+        checks.push({
+            name: 'SSH Port',
+            status: sshPort !== 22 ? 'pass' : 'warn',
+            message: `Port ${sshPort}${sshPort === 22 ? ' (consider changing from default)' : ''}`,
+        });
+    }
+    // Check firewall
+    if (commandExists('ufw')) {
+        try {
+            const ufwStatus = (0, child_process_1.execFileSync)('ufw', ['status'], { encoding: 'utf-8' });
+            const isActive = ufwStatus.includes('Status: active');
+            checks.push({
+                name: 'Firewall (ufw)',
+                status: isActive ? 'pass' : 'fail',
+                message: isActive ? 'Active' : 'Inactive',
+            });
+        }
+        catch {
+            checks.push({
+                name: 'Firewall (ufw)',
+                status: 'fail',
+                message: 'Could not check status',
+            });
+        }
+    }
+    else {
+        checks.push({
+            name: 'Firewall (ufw)',
+            status: 'fail',
+            message: 'Not installed',
+        });
+    }
+    // Check fail2ban
+    if (commandExists('fail2ban-client')) {
+        try {
+            (0, child_process_1.execFileSync)('fail2ban-client', ['status'], { encoding: 'utf-8' });
+            checks.push({
+                name: 'fail2ban',
+                status: 'pass',
+                message: 'Running',
+            });
+        }
+        catch {
+            checks.push({
+                name: 'fail2ban',
+                status: 'warn',
+                message: 'Installed but not running',
+            });
+        }
+    }
+    else {
+        checks.push({
+            name: 'fail2ban',
+            status: 'fail',
+            message: 'Not installed',
+        });
+    }
+    // Check auto-updates
+    if ((0, fs_1.existsSync)('/etc/apt/apt.conf.d/20auto-upgrades')) {
+        const config = (0, fs_1.readFileSync)('/etc/apt/apt.conf.d/20auto-upgrades', 'utf-8');
+        const enabled = config.includes('Unattended-Upgrade "1"');
+        checks.push({
+            name: 'Auto-updates',
+            status: enabled ? 'pass' : 'warn',
+            message: enabled ? 'Enabled' : 'Disabled',
+        });
+    }
+    else {
+        checks.push({
+            name: 'Auto-updates',
+            status: 'warn',
+            message: 'Not configured',
+        });
+    }
+    // Check for running services
+    if (isLinux()) {
+        try {
+            const services = (0, child_process_1.execSync)('ss -tlnp 2>/dev/null || netstat -tlnp 2>/dev/null', { encoding: 'utf-8' });
+            const openPorts = (services.match(/:\d+\s/g) || []).map(p => p.trim().replace(':', ''));
+            const uniquePorts = [...new Set(openPorts)].filter(p => p);
+            checks.push({
+                name: 'Open Ports',
+                status: uniquePorts.length <= 5 ? 'pass' : 'warn',
+                message: uniquePorts.slice(0, 10).join(', ') + (uniquePorts.length > 10 ? '...' : ''),
+            });
+        }
+        catch {
+            // Skip if can't check
+        }
+    }
+    // Print results
+    const statusIcons = { pass: '\x1b[32m✔\x1b[0m', fail: '\x1b[31m✖\x1b[0m', warn: '\x1b[33m⚠\x1b[0m' };
+    for (const check of checks) {
+        console.log(`${statusIcons[check.status]} ${check.name}: ${check.message}`);
+    }
+    const passCount = checks.filter(c => c.status === 'pass').length;
+    const failCount = checks.filter(c => c.status === 'fail').length;
+    const warnCount = checks.filter(c => c.status === 'warn').length;
+    console.log(`\n${passCount} passed, ${warnCount} warnings, ${failCount} failed`);
+    if (failCount > 0) {
+        console.log('\nRun `clodds secure` to fix security issues.');
+    }
+}
+// =============================================================================
+// MAIN
+// =============================================================================
+async function runSecure(args) {
+    console.log('\n\x1b[1m🔒 Clodds Server Security Hardening\x1b[0m\n');
+    // Parse arguments
+    const options = {
+        dryRun: args.includes('--dry-run') || args.includes('-n'),
+        interactive: !args.includes('--yes') && !args.includes('-y'),
+        sshPort: parseInt(args.find(a => a.startsWith('--ssh-port='))?.split('=')[1] || '22'),
+        skipFirewall: args.includes('--skip-firewall'),
+        skipFail2ban: args.includes('--skip-fail2ban'),
+        skipSsh: args.includes('--skip-ssh'),
+        skipUpdates: args.includes('--skip-updates'),
+        skipKernel: args.includes('--skip-kernel'),
+    };
+    // Handle subcommands
+    if (args.includes('audit') || args.includes('--audit')) {
+        runSecurityAudit();
+        return;
+    }
+    if (args.includes('--help') || args.includes('-h')) {
+        console.log(`Usage: clodds secure [options]
+
+Commands:
+  audit              Run security audit without making changes
+
+Options:
+  --dry-run, -n      Show what would be changed without modifying anything
+  --yes, -y          Skip confirmation prompts
+  --ssh-port=PORT    Set SSH port (default: 22)
+  --skip-firewall    Skip firewall configuration
+  --skip-fail2ban    Skip fail2ban setup
+  --skip-ssh         Skip SSH hardening
+  --skip-updates     Skip auto-updates setup
+  --skip-kernel      Skip kernel hardening
+  --help, -h         Show this help message
+
+Examples:
+  clodds secure --dry-run          Preview changes
+  clodds secure --yes              Apply all hardening without prompts
+  clodds secure --ssh-port=2222    Change SSH port to 2222
+  clodds secure audit              Run security audit only
+`);
+        return;
+    }
+    // Check platform
+    if (!isLinux()) {
+        log('error', 'Server hardening is only supported on Linux');
+        log('info', 'Run `clodds secure audit` to check current security status');
+        return;
+    }
+    // Check permissions
+    if (!isRoot() && !options.dryRun) {
+        log('warn', 'Some operations require root privileges');
+        log('info', 'Run with sudo or as root for full hardening');
+    }
+    if (options.dryRun) {
+        log('info', '=== DRY RUN MODE - No changes will be made ===\n');
+    }
+    // Confirm before proceeding
+    if (options.interactive && !options.dryRun) {
+        console.log('This will apply the following security hardening:');
+        if (!options.skipSsh)
+            console.log('  • SSH: Disable password auth, root login, limit attempts');
+        if (!options.skipFirewall)
+            console.log('  • Firewall: Configure ufw with minimal open ports');
+        if (!options.skipFail2ban)
+            console.log('  • fail2ban: Protect against brute force attacks');
+        if (!options.skipUpdates)
+            console.log('  • Auto-updates: Enable automatic security patches');
+        if (!options.skipKernel)
+            console.log('  • Kernel: Apply sysctl security settings');
+        console.log('');
+        const proceed = await confirm('Proceed with hardening?');
+        if (!proceed) {
+            log('info', 'Aborted');
+            return;
+        }
+        console.log('');
+    }
+    // Run hardening steps
+    try {
+        if (!options.skipSsh) {
+            hardenSSH(options);
+            console.log('');
+        }
+        if (!options.skipFirewall) {
+            setupFirewall(options);
+            console.log('');
+        }
+        if (!options.skipFail2ban) {
+            setupFail2ban(options);
+            console.log('');
+        }
+        if (!options.skipUpdates) {
+            setupAutoUpdates(options);
+            console.log('');
+        }
+        if (!options.skipKernel) {
+            hardenKernel(options);
+            console.log('');
+        }
+        log('success', '=== Security hardening complete ===');
+        if (!options.dryRun) {
+            console.log('\n⚠️  Important:');
+            console.log('  1. Make sure you have SSH key access before logging out');
+            console.log('  2. Test SSH connection in a new terminal before closing this one');
+            if (options.sshPort && options.sshPort !== 22) {
+                console.log(`  3. Use: ssh -p ${options.sshPort} user@server`);
+            }
+            console.log('\nRun `clodds secure audit` to verify security status');
+        }
+    }
+    catch (err) {
+        log('error', `Hardening failed: ${err instanceof Error ? err.message : err}`);
+        process.exit(1);
+    }
+}
+// Run if called directly
+if (require.main === module) {
+    runSecure(process.argv.slice(2)).catch(console.error);
+}
+//# sourceMappingURL=secure.js.map

package/dist/cli/secure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure.js","sourceRoot":"","sources":["../../src/cli/secure.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;GAWG;;AAwkBH,8BA4HC;AAlsBD,iDAAkE;AAClE,2BAA2F;AAC3F,2BAAiD;AAEjD,uCAA2C;AA0B3C,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;AAC9C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAA,aAAQ,GAAE,KAAK,OAAO,CAAC;AAC7C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAA,aAAQ,GAAE,KAAK,QAAQ,CAAC;AAE5C,SAAS,GAAG,CAAC,KAA4C,EAAE,GAAW;IACpE,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,UAAU,EAAK,OAAO;QAC5B,IAAI,EAAE,UAAU,EAAK,SAAS;QAC9B,KAAK,EAAE,UAAU,EAAI,MAAM;QAC3B,OAAO,EAAE,UAAU,EAAE,QAAQ;KAC9B,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,GAAG;QACT,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,GAAG;KACb,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAc,EAAE,UAAgD,EAAE;IACjG,MAAM,EAAE,IAAI,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEjD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAExC,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,EAAE,4BAA4B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAA,4BAAY,EAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,GAA4C,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClD,IAAA,iBAAY,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,OAAO,UAAU,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAgB;IACrC,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;YAC5C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,SAAS,SAAS,CAAC,OAAyB;IAC1C,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,sBAAsB,CAAC;IAC1C,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,EAAE,8CAA8C,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,MAAM,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,kCAAkC;IAClC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE,2BAA2B,CAAC,CAAC;QACxF,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,6BAA6B,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACnD,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,oBAAoB,CAAC,CAAC;QAC1E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,sBAAsB,CAAC;QACnC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,+BAA+B,EAAE,yBAAyB,CAAC,CAAC;QACpF,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,2BAA2B,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC3C,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC1C,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;QACnE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC7C,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,mBAAmB,CAAC,CAAC;QACxE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,qBAAqB,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC9C,CAAC;IAED,+BAA+B;IAC/B,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,IAAA,kBAAa,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClC,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAErC,sBAAsB;IACtB,IAAI,CAAC;QACH,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,GAAG,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,EAAE,8DAA8D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,SAAS,aAAa,CAAC,OAAyB;IAC9C,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAEtC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,UAAU,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,UAAU,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAEhE,oCAAoC;IACpC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;QACzC,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,OAAO;IACT,CAAC;IAED,sBAAsB;IACtB,UAAU,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,UAAU,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,UAAU,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpE,wBAAwB;IACxB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,MAAM,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,kBAAkB;IAClB,UAAU,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;AACpD,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,SAAS,aAAa,CAAC,OAAyB;IAC9C,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAEtC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,UAAU,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,UAAU,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG;;;;;;;;SAQZ,OAAO;;;;;CAKf,CAAC;IAEA,MAAM,aAAa,GAAG,0BAA0B,CAAC;IAEjD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,EAAE,gCAAgC,OAAO,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,UAAU,CAAC,aAAa,CAAC,CAAC;IAC1B,IAAA,kBAAa,EAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACzC,GAAG,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IAE5C,mBAAmB;IACnB,IAAI,CAAC;QACH,UAAU,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,GAAG,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,EAAE,2DAA2D,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,SAAS,gBAAgB,CAAC,OAAyB;IACjD,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;IAElD,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,EAAE,4CAA4C,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,IAAA,eAAU,EAAC,2CAA2C,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,UAAU,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,UAAU,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG;;;CAG3B,CAAC;IAEA,MAAM,UAAU,GAAG,qCAAqC,CAAC;IAEzD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,EAAE,mDAAmD,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAA,kBAAa,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC7C,GAAG,CAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,SAAS,YAAY,CAAC,OAAyB;IAC7C,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAExC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCtB,CAAC;IAEA,MAAM,UAAU,GAAG,uCAAuC,CAAC;IAE3D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QAC1C,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QACxC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAClC,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,UAAU,CAAC,UAAU,CAAC,CAAC;IACvB,IAAA,kBAAa,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAExC,wBAAwB;IACxB,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,EAAE,wDAAwD,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,SAAS,gBAAgB;IACvB,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAExC,MAAM,MAAM,GAA+E,EAAE,CAAC;IAE9F,mBAAmB;IACnB,IAAI,IAAA,eAAU,EAAC,sBAAsB,CAAC,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAA,iBAAY,EAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QAEhE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACzE,OAAO,EAAE,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,8BAA8B;SACvG,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAClE,OAAO,EAAE,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,8BAA8B;SAChG,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACxC,OAAO,EAAE,QAAQ,OAAO,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,EAAE,EAAE;SACvF,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAClC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,IAAI,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,IAAA,4BAAY,EAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,2BAA2B;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAA,eAAU,EAAC,qCAAqC,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACjC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;SAC1C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,6BAA6B;IAC7B,IAAI,OAAO,EAAE,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,wBAAQ,EAAC,mDAAmD,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACtG,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YACxF,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACjD,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAErG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAEjE,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,YAAY,SAAS,cAAc,SAAS,SAAS,CAAC,CAAC;IAEjF,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,OAAO;AACP,gFAAgF;AAEzE,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAErE,kBAAkB;IAClB,MAAM,OAAO,GAAqB;QAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzD,WAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC5D,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACrF,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC9C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC9C,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACpC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC5C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;KAC3C,CAAC;IAEF,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,gBAAgB,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;CAqBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;QAC5D,GAAG,CAAC,MAAM,EAAE,4DAA4D,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;IAClE,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,GAAG,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;QAEtD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YAClF,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,OAAO,cAAc,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,OAAO,EAAE,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,yBAAyB;AACzB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC"}