dkimkit 0.0.0-stage → 0.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +161 -2
- package/dist/src/cli.d.ts +2 -0
- package/dist/src/cli.js +398 -0
- package/dist/src/cli.js.map +1 -0
- package/dist/src/dns-host.d.ts +10 -0
- package/dist/src/dns-host.js +31 -0
- package/dist/src/dns-host.js.map +1 -0
- package/dist/src/errors.d.ts +17 -0
- package/dist/src/errors.js +51 -0
- package/dist/src/errors.js.map +1 -0
- package/dist/src/hosted/api.d.ts +107 -0
- package/dist/src/hosted/api.js +919 -0
- package/dist/src/hosted/api.js.map +1 -0
- package/dist/src/hosted/auth.d.ts +80 -0
- package/dist/src/hosted/auth.js +147 -0
- package/dist/src/hosted/auth.js.map +1 -0
- package/dist/src/hosted/billing-dodo.d.ts +58 -0
- package/dist/src/hosted/billing-dodo.js +139 -0
- package/dist/src/hosted/billing-dodo.js.map +1 -0
- package/dist/src/hosted/billing-stripe.d.ts +82 -0
- package/dist/src/hosted/billing-stripe.js +205 -0
- package/dist/src/hosted/billing-stripe.js.map +1 -0
- package/dist/src/hosted/billing.d.ts +114 -0
- package/dist/src/hosted/billing.js +173 -0
- package/dist/src/hosted/billing.js.map +1 -0
- package/dist/src/hosted/bulk.d.ts +47 -0
- package/dist/src/hosted/bulk.js +66 -0
- package/dist/src/hosted/bulk.js.map +1 -0
- package/dist/src/hosted/cli.d.ts +2 -0
- package/dist/src/hosted/cli.js +318 -0
- package/dist/src/hosted/cli.js.map +1 -0
- package/dist/src/hosted/crypto.d.ts +22 -0
- package/dist/src/hosted/crypto.js +55 -0
- package/dist/src/hosted/crypto.js.map +1 -0
- package/dist/src/hosted/index.d.ts +7 -0
- package/dist/src/hosted/index.js +11 -0
- package/dist/src/hosted/index.js.map +1 -0
- package/dist/src/hosted/markdown.d.ts +16 -0
- package/dist/src/hosted/markdown.js +168 -0
- package/dist/src/hosted/markdown.js.map +1 -0
- package/dist/src/hosted/net.d.ts +9 -0
- package/dist/src/hosted/net.js +60 -0
- package/dist/src/hosted/net.js.map +1 -0
- package/dist/src/hosted/postgres-store.d.ts +62 -0
- package/dist/src/hosted/postgres-store.js +387 -0
- package/dist/src/hosted/postgres-store.js.map +1 -0
- package/dist/src/hosted/serialize.d.ts +144 -0
- package/dist/src/hosted/serialize.js +126 -0
- package/dist/src/hosted/serialize.js.map +1 -0
- package/dist/src/hosted/service.d.ts +170 -0
- package/dist/src/hosted/service.js +603 -0
- package/dist/src/hosted/service.js.map +1 -0
- package/dist/src/hosted/site.d.ts +84 -0
- package/dist/src/hosted/site.js +653 -0
- package/dist/src/hosted/site.js.map +1 -0
- package/dist/src/hosted/sqlite-store.d.ts +45 -0
- package/dist/src/hosted/sqlite-store.js +351 -0
- package/dist/src/hosted/sqlite-store.js.map +1 -0
- package/dist/src/hosted/store.d.ts +257 -0
- package/dist/src/hosted/store.js +181 -0
- package/dist/src/hosted/store.js.map +1 -0
- package/dist/src/hosted/widget.d.ts +46 -0
- package/dist/src/hosted/widget.js +130 -0
- package/dist/src/hosted/widget.js.map +1 -0
- package/dist/src/hosted/worker.d.ts +45 -0
- package/dist/src/hosted/worker.js +142 -0
- package/dist/src/hosted/worker.js.map +1 -0
- package/dist/src/http.d.ts +14 -0
- package/dist/src/http.js +54 -0
- package/dist/src/http.js.map +1 -0
- package/dist/src/index.d.ts +19 -0
- package/dist/src/index.js +19 -0
- package/dist/src/index.js.map +1 -0
- package/dist/src/orchestrator.d.ts +70 -0
- package/dist/src/orchestrator.js +69 -0
- package/dist/src/orchestrator.js.map +1 -0
- package/dist/src/propagation.d.ts +30 -0
- package/dist/src/propagation.js +76 -0
- package/dist/src/propagation.js.map +1 -0
- package/dist/src/providers/dns/aws.d.ts +28 -0
- package/dist/src/providers/dns/aws.js +103 -0
- package/dist/src/providers/dns/aws.js.map +1 -0
- package/dist/src/providers/dns/cloudflare.d.ts +26 -0
- package/dist/src/providers/dns/cloudflare.js +97 -0
- package/dist/src/providers/dns/cloudflare.js.map +1 -0
- package/dist/src/providers/dns/manual.d.ts +12 -0
- package/dist/src/providers/dns/manual.js +18 -0
- package/dist/src/providers/dns/manual.js.map +1 -0
- package/dist/src/providers/dns/route53.d.ts +34 -0
- package/dist/src/providers/dns/route53.js +176 -0
- package/dist/src/providers/dns/route53.js.map +1 -0
- package/dist/src/providers/email/factory.d.ts +29 -0
- package/dist/src/providers/email/factory.js +67 -0
- package/dist/src/providers/email/factory.js.map +1 -0
- package/dist/src/providers/email/mailgun.d.ts +36 -0
- package/dist/src/providers/email/mailgun.js +141 -0
- package/dist/src/providers/email/mailgun.js.map +1 -0
- package/dist/src/providers/email/postmark.d.ts +37 -0
- package/dist/src/providers/email/postmark.js +121 -0
- package/dist/src/providers/email/postmark.js.map +1 -0
- package/dist/src/providers/email/sendgrid.d.ts +31 -0
- package/dist/src/providers/email/sendgrid.js +109 -0
- package/dist/src/providers/email/sendgrid.js.map +1 -0
- package/dist/src/providers/email/ses.d.ts +39 -0
- package/dist/src/providers/email/ses.js +123 -0
- package/dist/src/providers/email/ses.js.map +1 -0
- package/dist/src/providers/factory.d.ts +14 -0
- package/dist/src/providers/factory.js +32 -0
- package/dist/src/providers/factory.js.map +1 -0
- package/dist/src/records.d.ts +35 -0
- package/dist/src/records.js +109 -0
- package/dist/src/records.js.map +1 -0
- package/dist/src/server.d.ts +67 -0
- package/dist/src/server.js +301 -0
- package/dist/src/server.js.map +1 -0
- package/dist/src/types.d.ts +75 -0
- package/dist/src/types.js +2 -0
- package/dist/src/types.js.map +1 -0
- package/dist/src/xml.d.ts +6 -0
- package/dist/src/xml.js +23 -0
- package/dist/src/xml.js.map +1 -0
- package/docs/billing.md +43 -0
- package/docs/getting-started.md +66 -0
- package/docs/hosted-api.md +192 -0
- package/docs/library.md +253 -0
- package/docs/self-hosting.md +153 -0
- package/docs/widget.md +121 -0
- package/package.json +63 -4
- package/web/dashboard.html +669 -0
- package/web/index.html +697 -0
- package/web/widget-frame.html +480 -0
- package/web/widget.js +91 -0
|
@@ -0,0 +1,603 @@
|
|
|
1
|
+
import { ApiError, apiErrorHint, ConfigError, DnsConflictError } from '../errors.js';
|
|
2
|
+
import { setupDomain } from '../orchestrator.js';
|
|
3
|
+
import { authoritativeLookup } from '../propagation.js';
|
|
4
|
+
import { assertEmailCredentials, createEmailProvider, EMAIL_PROVIDER_LABELS, pickEmailCredentials, } from '../providers/email/factory.js';
|
|
5
|
+
import { createDnsProvider } from '../providers/factory.js';
|
|
6
|
+
import { normalizeName } from '../records.js';
|
|
7
|
+
import { hashApiKey, newApiKey, newId, newWebhookSecret } from './crypto.js';
|
|
8
|
+
import { assertPublicHttpsUrl } from './net.js';
|
|
9
|
+
import { iso, toPublicDomain } from './serialize.js';
|
|
10
|
+
import { DuplicateError, utcDay, } from './store.js';
|
|
11
|
+
/** Tenant credentials only: never falls back to the operator's environment or ~/.aws files. */
|
|
12
|
+
export const realProviders = {
|
|
13
|
+
email: (provider, credentials, subuser) => createEmailProvider(provider, credentials, { subuser }),
|
|
14
|
+
dns: (provider, c) => {
|
|
15
|
+
assertDnsCredentials(provider, c);
|
|
16
|
+
return createDnsProvider(provider, {
|
|
17
|
+
cloudflareApiToken: c.cloudflareApiToken,
|
|
18
|
+
aws: { accessKeyId: c.awsAccessKeyId, secretAccessKey: c.awsSecretAccessKey, sessionToken: c.awsSessionToken },
|
|
19
|
+
route53HostedZoneId: c.route53HostedZoneId,
|
|
20
|
+
env: {},
|
|
21
|
+
});
|
|
22
|
+
},
|
|
23
|
+
};
|
|
24
|
+
export class NotFoundError extends Error {
|
|
25
|
+
}
|
|
26
|
+
/** The account is at its plan's domain limit. */
|
|
27
|
+
export class PlanLimitError extends Error {
|
|
28
|
+
limit;
|
|
29
|
+
upgradeUrl;
|
|
30
|
+
constructor(limit, message = `Your plan allows ${limit} domain${limit === 1 ? '' : 's'}. Delete one or upgrade to add more.`,
|
|
31
|
+
/** Where to fix it, e.g. the billing dashboard. */
|
|
32
|
+
upgradeUrl) {
|
|
33
|
+
super(message);
|
|
34
|
+
this.limit = limit;
|
|
35
|
+
this.upgradeUrl = upgradeUrl;
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
export class ConflictError extends Error {
|
|
39
|
+
existingId;
|
|
40
|
+
constructor(message, existingId) {
|
|
41
|
+
super(message);
|
|
42
|
+
this.existingId = existingId;
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
const RETRY_DELAYS_MS = [30e3, 60e3, 2 * 60e3, 5 * 60e3, 10 * 60e3, 15 * 60e3, 30 * 60e3];
|
|
46
|
+
const HOUR = 3600e3;
|
|
47
|
+
export class DomainService {
|
|
48
|
+
opts;
|
|
49
|
+
store;
|
|
50
|
+
vault;
|
|
51
|
+
providers;
|
|
52
|
+
lookup;
|
|
53
|
+
now;
|
|
54
|
+
maxAgeMs;
|
|
55
|
+
reverifyMs;
|
|
56
|
+
log;
|
|
57
|
+
constructor(opts) {
|
|
58
|
+
this.opts = opts;
|
|
59
|
+
this.store = opts.store;
|
|
60
|
+
this.vault = opts.vault;
|
|
61
|
+
this.providers = opts.providers ?? realProviders;
|
|
62
|
+
this.lookup = opts.lookup ?? authoritativeLookup;
|
|
63
|
+
this.now = opts.now ?? Date.now;
|
|
64
|
+
this.maxAgeMs = opts.maxAgeMs ?? 72 * HOUR;
|
|
65
|
+
this.reverifyMs = opts.reverifyMs ?? 24 * HOUR;
|
|
66
|
+
this.log = opts.log ?? (() => { });
|
|
67
|
+
}
|
|
68
|
+
// ---- accounts ----
|
|
69
|
+
/** `provider` is the email provider and credentials, or a SendGrid API key as shorthand. */
|
|
70
|
+
async createAccount(name, provider, opts = {}) {
|
|
71
|
+
const setting = typeof provider === 'string' ? { provider: 'sendgrid', credentials: { apiKey: provider } } : provider;
|
|
72
|
+
if (setting)
|
|
73
|
+
assertEmailCredentials(setting.provider, setting.credentials);
|
|
74
|
+
const apiKey = newApiKey();
|
|
75
|
+
const account = {
|
|
76
|
+
id: newId('acct'),
|
|
77
|
+
name,
|
|
78
|
+
apiKeyHash: hashApiKey(apiKey),
|
|
79
|
+
emailProvider: setting?.provider ?? 'sendgrid',
|
|
80
|
+
emailCredentialsEnc: setting ? this.vault.encryptJson(pickEmailCredentials(setting.provider, setting.credentials)) : null,
|
|
81
|
+
webhookUrl: null,
|
|
82
|
+
webhookSecret: newWebhookSecret(),
|
|
83
|
+
widgetOrigins: [],
|
|
84
|
+
domainLimit: null,
|
|
85
|
+
email: opts.email ?? null,
|
|
86
|
+
billingCustomerId: null,
|
|
87
|
+
billingSubscriptionId: null,
|
|
88
|
+
billingStatus: 'free',
|
|
89
|
+
billingPeriodStart: null,
|
|
90
|
+
billingPeriodEnd: null,
|
|
91
|
+
reportedQuantity: 0,
|
|
92
|
+
billingEventAt: null,
|
|
93
|
+
createdAt: this.now(),
|
|
94
|
+
};
|
|
95
|
+
await this.store.createAccount(account);
|
|
96
|
+
return { account, apiKey };
|
|
97
|
+
}
|
|
98
|
+
async authenticate(apiKey) {
|
|
99
|
+
return await this.store.getAccountByKeyHash(hashApiKey(apiKey));
|
|
100
|
+
}
|
|
101
|
+
async updateAccount(account, patch) {
|
|
102
|
+
const changes = {};
|
|
103
|
+
if (patch.name !== undefined)
|
|
104
|
+
changes.name = patch.name;
|
|
105
|
+
const setting = patch.emailProvider ?? (patch.sendgridApiKey !== undefined ? { provider: 'sendgrid', credentials: { apiKey: patch.sendgridApiKey } } : undefined);
|
|
106
|
+
if (setting) {
|
|
107
|
+
// Fields left out keep their saved values (e.g. updating only the region).
|
|
108
|
+
const current = setting.provider === account.emailProvider ? this.credentialsOf(account) : {};
|
|
109
|
+
const credentials = pickEmailCredentials(setting.provider, { ...current, ...setting.credentials });
|
|
110
|
+
// Input errors first, then the switching rule.
|
|
111
|
+
assertEmailCredentials(setting.provider, credentials);
|
|
112
|
+
// Existing domains belong to the provider they were created at.
|
|
113
|
+
if (setting.provider !== account.emailProvider && (await this.store.countDomains(account.id)) > 0) {
|
|
114
|
+
throw new ConfigError(`This account's domains are at ${EMAIL_PROVIDER_LABELS[account.emailProvider] ?? account.emailProvider}. Delete them before switching email provider.`);
|
|
115
|
+
}
|
|
116
|
+
changes.emailProvider = setting.provider;
|
|
117
|
+
changes.emailCredentialsEnc = this.vault.encryptJson(credentials);
|
|
118
|
+
}
|
|
119
|
+
if (patch.widgetOrigins !== undefined)
|
|
120
|
+
changes.widgetOrigins = patch.widgetOrigins;
|
|
121
|
+
if (patch.webhookUrl !== undefined) {
|
|
122
|
+
if (patch.webhookUrl !== null) {
|
|
123
|
+
await assertPublicHttpsUrl(patch.webhookUrl, { allowPrivate: this.opts.allowPrivateWebhooks });
|
|
124
|
+
}
|
|
125
|
+
changes.webhookUrl = patch.webhookUrl;
|
|
126
|
+
}
|
|
127
|
+
await this.store.updateAccount(account.id, changes);
|
|
128
|
+
return (await this.store.getAccount(account.id));
|
|
129
|
+
}
|
|
130
|
+
async rotateApiKey(account) {
|
|
131
|
+
const apiKey = newApiKey();
|
|
132
|
+
await this.store.updateAccount(account.id, { apiKeyHash: hashApiKey(apiKey) });
|
|
133
|
+
return apiKey;
|
|
134
|
+
}
|
|
135
|
+
async rotateWebhookSecret(account) {
|
|
136
|
+
await this.store.updateAccount(account.id, { webhookSecret: newWebhookSecret() });
|
|
137
|
+
return (await this.store.getAccount(account.id));
|
|
138
|
+
}
|
|
139
|
+
// ---- domains ----
|
|
140
|
+
async getDomain(account, id) {
|
|
141
|
+
const row = await this.store.getDomain(account.id, id);
|
|
142
|
+
if (!row)
|
|
143
|
+
throw new NotFoundError(`No domain with id ${id}.`);
|
|
144
|
+
return row;
|
|
145
|
+
}
|
|
146
|
+
async listDomains(account, query) {
|
|
147
|
+
return await this.store.listDomains(account.id, query);
|
|
148
|
+
}
|
|
149
|
+
async listEvents(domainId, limit = 100) {
|
|
150
|
+
return await this.store.listEvents(domainId, limit);
|
|
151
|
+
}
|
|
152
|
+
/** Creates the domain at the email provider right away so the response can include its DNS records. */
|
|
153
|
+
async createDomain(account, input) {
|
|
154
|
+
const domain = normalizeName(input.domain);
|
|
155
|
+
const subdomain = input.subdomain || null;
|
|
156
|
+
const existing = await this.store.findDomain(account.id, domain, subdomain);
|
|
157
|
+
if (existing)
|
|
158
|
+
throw new ConflictError(`${domain} is already registered.`, existing.id);
|
|
159
|
+
const credentials = pickCredentials(input.dnsProvider, input.dnsCredentials ?? {});
|
|
160
|
+
assertDnsCredentials(input.dnsProvider, credentials);
|
|
161
|
+
const cap = this.opts.planCap?.(account) ?? null;
|
|
162
|
+
if (account.domainLimit === null && !cap)
|
|
163
|
+
return await this.insertNewDomain(account, input, domain, subdomain, credentials);
|
|
164
|
+
// A limited account's creates run one at a time in this process, so concurrent ones (e.g. a
|
|
165
|
+
// bulk add) can't all pass the check. Across several processes the limit stays soft.
|
|
166
|
+
return await this.serialized(account.id, async () => {
|
|
167
|
+
// Before anything is created at the email provider.
|
|
168
|
+
const count = await this.store.countDomains(account.id);
|
|
169
|
+
if (cap && count >= cap.limit)
|
|
170
|
+
throw new PlanLimitError(cap.limit, cap.message, cap.upgradeUrl);
|
|
171
|
+
if (account.domainLimit !== null && count >= account.domainLimit)
|
|
172
|
+
throw new PlanLimitError(account.domainLimit);
|
|
173
|
+
return await this.insertNewDomain(account, input, domain, subdomain, credentials);
|
|
174
|
+
});
|
|
175
|
+
}
|
|
176
|
+
accountQueues = new Map();
|
|
177
|
+
/** Runs `fn` after any earlier call for the same account has settled. */
|
|
178
|
+
async serialized(accountId, fn) {
|
|
179
|
+
const run = (this.accountQueues.get(accountId) ?? Promise.resolve()).then(fn);
|
|
180
|
+
const tail = run.catch(() => { });
|
|
181
|
+
this.accountQueues.set(accountId, tail);
|
|
182
|
+
try {
|
|
183
|
+
return await run;
|
|
184
|
+
}
|
|
185
|
+
finally {
|
|
186
|
+
if (this.accountQueues.get(accountId) === tail)
|
|
187
|
+
this.accountQueues.delete(accountId);
|
|
188
|
+
}
|
|
189
|
+
}
|
|
190
|
+
async insertNewDomain(account, input, domain, subdomain, credentials) {
|
|
191
|
+
const sendgridSubuser = input.sendgridSubuser || null;
|
|
192
|
+
const email = this.emailFor(account, sendgridSubuser);
|
|
193
|
+
const inbound = this.resolveInbound(email, domain, input.inbound ?? null);
|
|
194
|
+
const auth = await email.ensureDomain(domain, { subdomain: subdomain ?? undefined });
|
|
195
|
+
const now = this.now();
|
|
196
|
+
const records = [...auth.records, ...(inbound ? email.inboundRecords(inbound.hostname) : [])];
|
|
197
|
+
const row = {
|
|
198
|
+
id: newId('dom'),
|
|
199
|
+
accountId: account.id,
|
|
200
|
+
domain,
|
|
201
|
+
subdomain,
|
|
202
|
+
tenantId: input.tenantId ?? null,
|
|
203
|
+
metadata: input.metadata ?? {},
|
|
204
|
+
status: 'pending',
|
|
205
|
+
providerDomainId: auth.id,
|
|
206
|
+
sendgridSubuser,
|
|
207
|
+
dnsProvider: input.dnsProvider,
|
|
208
|
+
dnsCredentialsEnc: input.dnsProvider === 'manual' ? null : this.vault.encryptJson(credentials),
|
|
209
|
+
inbound,
|
|
210
|
+
overwrite: input.overwrite ?? false,
|
|
211
|
+
records,
|
|
212
|
+
pending: records.map((r) => r.name),
|
|
213
|
+
validation: null,
|
|
214
|
+
conflicts: null,
|
|
215
|
+
lastError: null,
|
|
216
|
+
attempts: 0,
|
|
217
|
+
nextRunAt: now,
|
|
218
|
+
lockedUntil: null,
|
|
219
|
+
verifiedAt: null,
|
|
220
|
+
expiresAt: now + this.maxAgeMs,
|
|
221
|
+
createdAt: now,
|
|
222
|
+
updatedAt: now,
|
|
223
|
+
};
|
|
224
|
+
try {
|
|
225
|
+
await this.store.insertDomain(row);
|
|
226
|
+
}
|
|
227
|
+
catch (err) {
|
|
228
|
+
if (!(err instanceof DuplicateError))
|
|
229
|
+
throw err;
|
|
230
|
+
const winner = await this.store.findDomain(account.id, domain, subdomain);
|
|
231
|
+
throw new ConflictError(`${domain} is already registered.`, winner?.id ?? '');
|
|
232
|
+
}
|
|
233
|
+
await this.emit(account, row, 'domain.created');
|
|
234
|
+
await this.recordUsage(row, 'domain_created', `domain_created:${row.id}`);
|
|
235
|
+
return row;
|
|
236
|
+
}
|
|
237
|
+
async updateDomain(account, id, patch) {
|
|
238
|
+
const row = await this.getDomain(account, id);
|
|
239
|
+
const now = this.now();
|
|
240
|
+
const changes = { updatedAt: now };
|
|
241
|
+
let rerun = false;
|
|
242
|
+
if (patch.tenantId !== undefined)
|
|
243
|
+
changes.tenantId = patch.tenantId;
|
|
244
|
+
if (patch.metadata !== undefined)
|
|
245
|
+
changes.metadata = patch.metadata;
|
|
246
|
+
if (patch.dnsProvider !== undefined || patch.dnsCredentials !== undefined) {
|
|
247
|
+
const provider = patch.dnsProvider ?? row.dnsProvider;
|
|
248
|
+
const providerChanged = provider !== row.dnsProvider;
|
|
249
|
+
const current = row.dnsCredentialsEnc && !providerChanged ? this.vault.decryptJson(row.dnsCredentialsEnc) : {};
|
|
250
|
+
const credentials = pickCredentials(provider, { ...current, ...patch.dnsCredentials });
|
|
251
|
+
assertDnsCredentials(provider, credentials);
|
|
252
|
+
changes.dnsProvider = provider;
|
|
253
|
+
changes.dnsCredentialsEnc = provider === 'manual' ? null : this.vault.encryptJson(credentials);
|
|
254
|
+
rerun = true;
|
|
255
|
+
}
|
|
256
|
+
if (patch.overwrite !== undefined && patch.overwrite !== row.overwrite) {
|
|
257
|
+
changes.overwrite = patch.overwrite;
|
|
258
|
+
rerun = true;
|
|
259
|
+
}
|
|
260
|
+
if (patch.inbound !== undefined) {
|
|
261
|
+
const email = this.emailFor(account, row.sendgridSubuser);
|
|
262
|
+
const inbound = this.resolveInbound(email, row.domain, patch.inbound);
|
|
263
|
+
const old = row.inbound;
|
|
264
|
+
if (old && old.hostname !== inbound?.hostname) {
|
|
265
|
+
await ignoreNotFound(email.deleteInboundParse(old.hostname));
|
|
266
|
+
}
|
|
267
|
+
// The old MX record stays in the tenant's DNS; we never delete DNS records.
|
|
268
|
+
const withoutOldMx = row.records.filter((r) => !(old && r.type === 'MX' && r.name === old.hostname));
|
|
269
|
+
changes.inbound = inbound;
|
|
270
|
+
changes.records = [...withoutOldMx, ...(inbound ? email.inboundRecords(inbound.hostname) : [])];
|
|
271
|
+
rerun = true;
|
|
272
|
+
}
|
|
273
|
+
if (rerun) {
|
|
274
|
+
Object.assign(changes, {
|
|
275
|
+
status: 'pending',
|
|
276
|
+
conflicts: null,
|
|
277
|
+
lastError: null,
|
|
278
|
+
attempts: 0,
|
|
279
|
+
expiresAt: now + this.maxAgeMs,
|
|
280
|
+
nextRunAt: now,
|
|
281
|
+
});
|
|
282
|
+
}
|
|
283
|
+
return await this.store.updateDomain(row.id, changes);
|
|
284
|
+
}
|
|
285
|
+
/**
|
|
286
|
+
* Checks that DNS credentials work for this domain's zone by planning the
|
|
287
|
+
* changes, without writing anything. Throws the provider's error if not.
|
|
288
|
+
*/
|
|
289
|
+
async testDnsAccess(row, provider, credentials) {
|
|
290
|
+
const picked = pickCredentials(provider, credentials);
|
|
291
|
+
assertDnsCredentials(provider, picked);
|
|
292
|
+
if (provider === 'manual')
|
|
293
|
+
return [];
|
|
294
|
+
return this.providers.dns(provider, picked).plan(row.records, { overwrite: row.overwrite });
|
|
295
|
+
}
|
|
296
|
+
/** Schedules an immediate check. Restarts the clock for failed or conflicting domains. */
|
|
297
|
+
async verifyNow(account, id) {
|
|
298
|
+
const row = await this.getDomain(account, id);
|
|
299
|
+
const now = this.now();
|
|
300
|
+
if (row.lockedUntil !== null && row.lockedUntil > now)
|
|
301
|
+
return row;
|
|
302
|
+
const restart = row.status === 'failed' || row.status === 'conflict';
|
|
303
|
+
return await this.store.updateDomain(row.id, {
|
|
304
|
+
nextRunAt: now,
|
|
305
|
+
attempts: 0,
|
|
306
|
+
updatedAt: now,
|
|
307
|
+
...(restart ? { status: 'pending', conflicts: null, lastError: null, expiresAt: now + this.maxAgeMs } : {}),
|
|
308
|
+
});
|
|
309
|
+
}
|
|
310
|
+
/** Removes the domain here; with `remote`, also deletes it (and its inbound parse) at the email provider. */
|
|
311
|
+
async deleteDomain(account, id, { remote = false } = {}) {
|
|
312
|
+
const row = await this.getDomain(account, id);
|
|
313
|
+
if (remote) {
|
|
314
|
+
const email = this.emailFor(account, row.sendgridSubuser);
|
|
315
|
+
if (row.inbound)
|
|
316
|
+
await ignoreNotFound(email.deleteInboundParse(row.inbound.hostname));
|
|
317
|
+
await ignoreNotFound(email.deleteDomain(row.providerDomainId));
|
|
318
|
+
}
|
|
319
|
+
await this.emit(account, row, 'domain.deleted', { remote });
|
|
320
|
+
await this.store.deleteDomain(row.id);
|
|
321
|
+
}
|
|
322
|
+
/**
|
|
323
|
+
* One step of the lifecycle for a leased domain: write DNS if needed, check
|
|
324
|
+
* propagation once, validate once, then reschedule. Always releases the lease.
|
|
325
|
+
*/
|
|
326
|
+
async runDomain(leased) {
|
|
327
|
+
const account = await this.store.getAccount(leased.accountId);
|
|
328
|
+
if (!account) {
|
|
329
|
+
await this.store.deleteDomain(leased.id);
|
|
330
|
+
return leased;
|
|
331
|
+
}
|
|
332
|
+
const now = this.now();
|
|
333
|
+
try {
|
|
334
|
+
const email = this.emailFor(account, leased.sendgridSubuser);
|
|
335
|
+
if (leased.status === 'verified')
|
|
336
|
+
return await this.reverify(account, leased, email, now);
|
|
337
|
+
if (leased.expiresAt !== null && now > leased.expiresAt) {
|
|
338
|
+
return await this.fail(account, leased, now, 'Not verified in time. Check the DNS records, then call POST /v1/domains/{id}/verify to try again.');
|
|
339
|
+
}
|
|
340
|
+
let written = 0;
|
|
341
|
+
const result = await setupDomain(pinDomain(email, leased.providerDomainId), this.dnsFor(leased), {
|
|
342
|
+
domain: leased.domain,
|
|
343
|
+
subdomain: leased.subdomain ?? undefined,
|
|
344
|
+
overwrite: leased.overwrite,
|
|
345
|
+
inbound: leased.inbound ?? undefined,
|
|
346
|
+
propagation: { lookup: await this.lookup(leased.domain), timeoutMs: 0 },
|
|
347
|
+
validation: { attempts: 1 },
|
|
348
|
+
onEvent: (e) => {
|
|
349
|
+
if (e.type === 'applied')
|
|
350
|
+
written = e.changes.length;
|
|
351
|
+
},
|
|
352
|
+
});
|
|
353
|
+
const records = result.changes.map((c) => c.record);
|
|
354
|
+
const base = { records, conflicts: null, lastError: null, updatedAt: now };
|
|
355
|
+
let row;
|
|
356
|
+
if (result.status === 'complete') {
|
|
357
|
+
row = await this.store.updateDomain(leased.id, {
|
|
358
|
+
...base,
|
|
359
|
+
status: 'verified',
|
|
360
|
+
pending: [],
|
|
361
|
+
validation: result.validation ?? null,
|
|
362
|
+
attempts: 0,
|
|
363
|
+
verifiedAt: now,
|
|
364
|
+
nextRunAt: now + this.reverifyMs,
|
|
365
|
+
lockedUntil: null,
|
|
366
|
+
});
|
|
367
|
+
}
|
|
368
|
+
else if (result.status === 'dns-pending') {
|
|
369
|
+
row = await this.store.updateDomain(leased.id, {
|
|
370
|
+
...base,
|
|
371
|
+
status: 'awaiting_dns',
|
|
372
|
+
pending: (result.pending ?? []).map((r) => r.name),
|
|
373
|
+
...this.retry(leased, now),
|
|
374
|
+
});
|
|
375
|
+
}
|
|
376
|
+
else {
|
|
377
|
+
row = await this.store.updateDomain(leased.id, {
|
|
378
|
+
...base,
|
|
379
|
+
status: 'verifying',
|
|
380
|
+
pending: [],
|
|
381
|
+
validation: result.validation ?? null,
|
|
382
|
+
...this.retry(leased, now),
|
|
383
|
+
});
|
|
384
|
+
}
|
|
385
|
+
if (written > 0)
|
|
386
|
+
await this.emit(account, row, 'domain.dns_written', { count: written });
|
|
387
|
+
if (row.status === 'verified') {
|
|
388
|
+
await this.emit(account, row, 'domain.verified');
|
|
389
|
+
await this.recordUsage(row, 'domain_verified', `domain_verified:${row.id}:${now}`);
|
|
390
|
+
await this.recordUsage(row, 'active_domain_day', `active_domain_day:${row.id}:${utcDay(now)}`);
|
|
391
|
+
}
|
|
392
|
+
return row;
|
|
393
|
+
}
|
|
394
|
+
catch (err) {
|
|
395
|
+
return await this.handleError(account, leased, now, err);
|
|
396
|
+
}
|
|
397
|
+
}
|
|
398
|
+
async reverify(account, row, email, now) {
|
|
399
|
+
const validation = await email.validateDomain(row.providerDomainId);
|
|
400
|
+
if (validation.valid) {
|
|
401
|
+
await this.recordUsage(row, 'active_domain_day', `active_domain_day:${row.id}:${utcDay(now)}`);
|
|
402
|
+
return await this.store.updateDomain(row.id, {
|
|
403
|
+
validation, lastError: null, attempts: 0, nextRunAt: now + this.reverifyMs, lockedUntil: null, updatedAt: now,
|
|
404
|
+
});
|
|
405
|
+
}
|
|
406
|
+
const lost = await this.store.updateDomain(row.id, {
|
|
407
|
+
status: 'awaiting_dns',
|
|
408
|
+
validation,
|
|
409
|
+
verifiedAt: null,
|
|
410
|
+
attempts: 0,
|
|
411
|
+
expiresAt: now + this.maxAgeMs,
|
|
412
|
+
nextRunAt: now + RETRY_DELAYS_MS[0],
|
|
413
|
+
lockedUntil: null,
|
|
414
|
+
updatedAt: now,
|
|
415
|
+
});
|
|
416
|
+
await this.emit(account, lost, 'domain.verification_lost');
|
|
417
|
+
return lost;
|
|
418
|
+
}
|
|
419
|
+
async handleError(account, row, now, err) {
|
|
420
|
+
if (err instanceof DnsConflictError) {
|
|
421
|
+
const updated = await this.store.updateDomain(row.id, {
|
|
422
|
+
status: 'conflict', conflicts: err.conflicts, lastError: err.message, nextRunAt: null, lockedUntil: null, updatedAt: now,
|
|
423
|
+
});
|
|
424
|
+
await this.emit(account, updated, 'domain.conflict');
|
|
425
|
+
return updated;
|
|
426
|
+
}
|
|
427
|
+
// Bad credentials, missing zones, a provider domain deleted out of band: retrying won't help.
|
|
428
|
+
if (err instanceof ConfigError || (err instanceof ApiError && [400, 401, 403, 404].includes(err.status))) {
|
|
429
|
+
const hint = err instanceof ApiError ? apiErrorHint(err) : undefined;
|
|
430
|
+
return await this.fail(account, row, now, hint ? `${err.message} ${hint}` : err.message);
|
|
431
|
+
}
|
|
432
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
433
|
+
this.log('warn', 'domain check failed; will retry', { domain_id: row.id, error: message });
|
|
434
|
+
return await this.store.updateDomain(row.id, { lastError: message, updatedAt: now, ...this.retry(row, now) });
|
|
435
|
+
}
|
|
436
|
+
async fail(account, row, now, reason) {
|
|
437
|
+
const updated = await this.store.updateDomain(row.id, {
|
|
438
|
+
status: 'failed', lastError: reason, nextRunAt: null, lockedUntil: null, updatedAt: now,
|
|
439
|
+
});
|
|
440
|
+
await this.emit(account, updated, 'domain.failed', { reason });
|
|
441
|
+
return updated;
|
|
442
|
+
}
|
|
443
|
+
retry(row, now) {
|
|
444
|
+
const attempts = row.attempts + 1;
|
|
445
|
+
const delay = RETRY_DELAYS_MS[Math.min(attempts - 1, RETRY_DELAYS_MS.length - 1)];
|
|
446
|
+
return { attempts, nextRunAt: now + delay, lockedUntil: null };
|
|
447
|
+
}
|
|
448
|
+
// ---- usage metering ----
|
|
449
|
+
/** Records an active day for every verified domain. Idempotent; the runner calls it hourly. */
|
|
450
|
+
async meterActiveDomains() {
|
|
451
|
+
const now = this.now();
|
|
452
|
+
await this.store.recordActiveDomainDays(utcDay(now), now);
|
|
453
|
+
}
|
|
454
|
+
/** One account's usage for a period, optionally broken down by tenant. */
|
|
455
|
+
async usage(account, from, to, groupByTenant) {
|
|
456
|
+
const [total] = await this.store.summarizeUsage({ from, to, accountId: account.id });
|
|
457
|
+
return {
|
|
458
|
+
totals: total ?? emptyTotals(),
|
|
459
|
+
byTenant: groupByTenant ? await this.store.summarizeUsage({ from, to, accountId: account.id, groupByTenant: true }) : null,
|
|
460
|
+
domainCount: await this.store.countDomains(account.id),
|
|
461
|
+
};
|
|
462
|
+
}
|
|
463
|
+
/** Every account's usage for a period, for invoicing. */
|
|
464
|
+
async usageReport(from, to) {
|
|
465
|
+
const rows = new Map((await this.store.summarizeUsage({ from, to })).map((r) => [r.accountId, r]));
|
|
466
|
+
return (await this.store.listAccounts()).map((a) => ({
|
|
467
|
+
...(rows.get(a.id) ?? { accountId: a.id, ...emptyTotals() }),
|
|
468
|
+
name: a.name,
|
|
469
|
+
domainLimit: a.domainLimit,
|
|
470
|
+
}));
|
|
471
|
+
}
|
|
472
|
+
async setDomainLimit(accountId, limit) {
|
|
473
|
+
if (!(await this.store.getAccount(accountId)))
|
|
474
|
+
throw new NotFoundError(`No account with id ${accountId}.`);
|
|
475
|
+
await this.store.updateAccount(accountId, { domainLimit: limit });
|
|
476
|
+
return (await this.store.getAccount(accountId));
|
|
477
|
+
}
|
|
478
|
+
async recordUsage(row, metric, id) {
|
|
479
|
+
const now = this.now();
|
|
480
|
+
await this.store.recordUsage([
|
|
481
|
+
{ id, accountId: row.accountId, tenantId: row.tenantId, domainId: row.id, domain: row.domain, metric, quantity: 1, day: utcDay(now), occurredAt: now },
|
|
482
|
+
]);
|
|
483
|
+
}
|
|
484
|
+
async emit(account, row, type, data = {}) {
|
|
485
|
+
const now = this.now();
|
|
486
|
+
const event = { id: newId('evt'), domainId: row.id, accountId: account.id, type, data, createdAt: now };
|
|
487
|
+
await this.store.addEvent(event);
|
|
488
|
+
if (!account.webhookUrl)
|
|
489
|
+
return;
|
|
490
|
+
await this.store.addDelivery({
|
|
491
|
+
id: newId('whd'),
|
|
492
|
+
accountId: account.id,
|
|
493
|
+
eventId: event.id,
|
|
494
|
+
url: account.webhookUrl,
|
|
495
|
+
payload: JSON.stringify({
|
|
496
|
+
id: event.id,
|
|
497
|
+
object: 'event',
|
|
498
|
+
type,
|
|
499
|
+
created_at: iso(now),
|
|
500
|
+
data: { ...data, domain: toPublicDomain(row) },
|
|
501
|
+
}),
|
|
502
|
+
status: 'pending',
|
|
503
|
+
attempts: 0,
|
|
504
|
+
nextAttemptAt: now,
|
|
505
|
+
lockedUntil: null,
|
|
506
|
+
lastError: null,
|
|
507
|
+
responseStatus: null,
|
|
508
|
+
createdAt: now,
|
|
509
|
+
});
|
|
510
|
+
}
|
|
511
|
+
/** Fills in the provider's default inbound hostname, and rejects inbound where the provider can't receive. */
|
|
512
|
+
resolveInbound(email, domain, inbound) {
|
|
513
|
+
if (!inbound)
|
|
514
|
+
return null;
|
|
515
|
+
if (!email.supportsInbound)
|
|
516
|
+
throw new ConfigError(`Receiving email isn't supported with ${email.label} yet.`);
|
|
517
|
+
return { ...inbound, hostname: inbound.hostname ?? email.defaultInboundHostname(domain) };
|
|
518
|
+
}
|
|
519
|
+
/** The account's provider credentials; legacy rows hold a bare (encrypted) SendGrid key. */
|
|
520
|
+
credentialsOf(account) {
|
|
521
|
+
if (!account.emailCredentialsEnc)
|
|
522
|
+
return {};
|
|
523
|
+
const plain = this.vault.decrypt(account.emailCredentialsEnc);
|
|
524
|
+
try {
|
|
525
|
+
const parsed = JSON.parse(plain);
|
|
526
|
+
if (parsed && typeof parsed === 'object')
|
|
527
|
+
return parsed;
|
|
528
|
+
}
|
|
529
|
+
catch {
|
|
530
|
+
// Not JSON: a legacy SendGrid key.
|
|
531
|
+
}
|
|
532
|
+
return { apiKey: plain };
|
|
533
|
+
}
|
|
534
|
+
emailFor(account, subuser) {
|
|
535
|
+
if (!account.emailCredentialsEnc) {
|
|
536
|
+
throw new ConfigError('Add your email provider credentials first: PATCH /v1/account with email_provider (or Settings in the dashboard).');
|
|
537
|
+
}
|
|
538
|
+
if (subuser && account.emailProvider !== 'sendgrid')
|
|
539
|
+
throw new ConfigError('sendgrid_subuser only applies to SendGrid accounts.');
|
|
540
|
+
return this.providers.email(account.emailProvider, this.credentialsOf(account), subuser);
|
|
541
|
+
}
|
|
542
|
+
dnsFor(row) {
|
|
543
|
+
const credentials = row.dnsCredentialsEnc ? this.vault.decryptJson(row.dnsCredentialsEnc) : {};
|
|
544
|
+
return this.providers.dns(row.dnsProvider, credentials);
|
|
545
|
+
}
|
|
546
|
+
}
|
|
547
|
+
export function assertDnsCredentials(provider, c) {
|
|
548
|
+
switch (provider) {
|
|
549
|
+
case 'manual':
|
|
550
|
+
return;
|
|
551
|
+
case 'cloudflare':
|
|
552
|
+
if (!c.cloudflareApiToken)
|
|
553
|
+
throw new ConfigError('dns.cloudflare_api_token is required for Cloudflare.');
|
|
554
|
+
return;
|
|
555
|
+
case 'route53':
|
|
556
|
+
if (!c.awsAccessKeyId || !c.awsSecretAccessKey) {
|
|
557
|
+
throw new ConfigError('dns.aws_access_key_id and dns.aws_secret_access_key are required for Route 53.');
|
|
558
|
+
}
|
|
559
|
+
return;
|
|
560
|
+
default:
|
|
561
|
+
throw new ConfigError('dns.provider must be one of: manual, cloudflare, route53.');
|
|
562
|
+
}
|
|
563
|
+
}
|
|
564
|
+
/** Keeps only the credentials the provider uses, so nothing extra is stored. */
|
|
565
|
+
function pickCredentials(provider, c) {
|
|
566
|
+
if (provider === 'cloudflare')
|
|
567
|
+
return { cloudflareApiToken: c.cloudflareApiToken };
|
|
568
|
+
if (provider === 'route53') {
|
|
569
|
+
const { awsAccessKeyId, awsSecretAccessKey, awsSessionToken, route53HostedZoneId } = c;
|
|
570
|
+
return Object.fromEntries(Object.entries({ awsAccessKeyId, awsSecretAccessKey, awsSessionToken, route53HostedZoneId }).filter(([, v]) => v));
|
|
571
|
+
}
|
|
572
|
+
return {};
|
|
573
|
+
}
|
|
574
|
+
/** Makes `ensureDomain` return the provider domain this row was created with, by id. */
|
|
575
|
+
function pinDomain(email, id) {
|
|
576
|
+
return {
|
|
577
|
+
name: email.name,
|
|
578
|
+
label: email.label,
|
|
579
|
+
supportsInbound: email.supportsInbound,
|
|
580
|
+
defaultInboundHostname: (domain) => email.defaultInboundHostname(domain),
|
|
581
|
+
findDomain: (domain, subdomain) => email.findDomain(domain, subdomain),
|
|
582
|
+
ensureDomain: () => email.getDomain(id),
|
|
583
|
+
getDomain: (i) => email.getDomain(i),
|
|
584
|
+
deleteDomain: (i) => email.deleteDomain(i),
|
|
585
|
+
validateDomain: (i) => email.validateDomain(i),
|
|
586
|
+
inboundRecords: (hostname) => email.inboundRecords(hostname),
|
|
587
|
+
ensureInboundParse: (o) => email.ensureInboundParse(o),
|
|
588
|
+
deleteInboundParse: (hostname) => email.deleteInboundParse(hostname),
|
|
589
|
+
};
|
|
590
|
+
}
|
|
591
|
+
async function ignoreNotFound(p) {
|
|
592
|
+
try {
|
|
593
|
+
await p;
|
|
594
|
+
}
|
|
595
|
+
catch (err) {
|
|
596
|
+
if (!(err instanceof ApiError && err.status === 404))
|
|
597
|
+
throw err;
|
|
598
|
+
}
|
|
599
|
+
}
|
|
600
|
+
function emptyTotals() {
|
|
601
|
+
return { domainsCreated: 0, verifications: 0, activeDomains: 0, activeDomainDays: 0 };
|
|
602
|
+
}
|
|
603
|
+
//# sourceMappingURL=service.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/hosted/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAkB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAc,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,MAAM,GASP,MAAM,YAAY,CAAC;AAsDpB,+FAA+F;AAC/F,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC;IAClG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE;QACnB,oBAAoB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClC,OAAO,iBAAiB,CAAC,QAAQ,EAAE;YACjC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,CAAC,CAAC,kBAAkB,EAAE,YAAY,EAAE,CAAC,CAAC,eAAe,EAAE;YAC9G,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;YAC1C,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C,iDAAiD;AACjD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B;IAGA;IAJX,YACW,KAAa,EACtB,OAAO,GAAG,oBAAoB,KAAK,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,sCAAsC;IACzG,mDAAmD;IAC1C,UAAmB;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,UAAK,GAAL,KAAK,CAAQ;QAGb,eAAU,GAAV,UAAU,CAAS;IAG9B,CAAC;CACF;AASD,MAAM,OAAO,aAAc,SAAQ,KAAK;IAG3B;IAFX,YACE,OAAe,EACN,UAAkB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,eAAU,GAAV,UAAU,CAAQ;IAG7B,CAAC;CACF;AAoBD,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;AAC1F,MAAM,IAAI,GAAG,MAAM,CAAC;AAEpB,MAAM,OAAO,aAAa;IAUK;IATZ,KAAK,CAAQ;IACb,KAAK,CAAQ;IACb,SAAS,CAAkB;IAC3B,MAAM,CAAyC;IAC/C,GAAG,CAAe;IAClB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,GAAG,CAAS;IAE7B,YAA6B,IAAoB;QAApB,SAAI,GAAJ,IAAI,CAAgB;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,mBAAmB,CAAC;QACjD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,IAAI,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,qBAAqB;IAErB,4FAA4F;IAC5F,KAAK,CAAC,aAAa,CACjB,IAAY,EACZ,QAAwC,EACxC,OAA2B,EAAE;QAE7B,MAAM,OAAO,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtH,IAAI,OAAO;YAAE,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAY;YACvB,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,IAAI;YACJ,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;YAC9B,aAAa,EAAE,OAAO,EAAE,QAAQ,IAAI,UAAU;YAC9C,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACzH,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,gBAAgB,EAAE;YACjC,aAAa,EAAE,EAAE;YACjB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;YACzB,iBAAiB,EAAE,IAAI;YACvB,qBAAqB,EAAE,IAAI;YAC3B,aAAa,EAAE,MAAM;YACrB,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,KAAmB;QACvD,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxD,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClK,IAAI,OAAO,EAAE,CAAC;YACZ,2EAA2E;YAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACnG,+CAA+C;YAC/C,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACtD,gEAAgE;YAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClG,MAAM,IAAI,WAAW,CACnB,iCAAiC,qBAAqB,CAAC,OAAO,CAAC,aAAmD,CAAC,IAAI,OAAO,CAAC,aAAa,gDAAgD,CAC7L,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC;YACzC,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACnF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB;QACjC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAgB;QACxC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAE,CAAC;IACpD,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,SAAS,CAAC,OAAgB,EAAE,EAAU;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,KAAuB;QACzD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,KAAK,GAAG,GAAG;QAC5C,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,KAAkB;QACrD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5E,IAAI,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,MAAM,yBAAyB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEvF,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACnF,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QACjD,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5H,4FAA4F;QAC5F,qFAAqF;QACrF,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAClD,oDAAoD;YACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACxD,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,KAAK;gBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;YAChG,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,IAAI,OAAO,CAAC,WAAW;gBAAE,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAChH,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC;IAEgB,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;IAErE,yEAAyE;IACjE,KAAK,CAAC,UAAU,CAAI,SAAiB,EAAE,EAAoB;QACjE,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,OAAgB,EAChB,KAAkB,EAClB,MAAc,EACd,SAAwB,EACxB,WAA2B;QAE3B,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;QAErF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAc;YACrB,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;YAChB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM;YACN,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,MAAM,EAAE,SAAS;YACjB,gBAAgB,EAAE,IAAI,CAAC,EAAE;YACzB,eAAe;YACf,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,iBAAiB,EAAE,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC;YAC9F,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;YACnC,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACnC,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ;YAC9B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC;gBAAE,MAAM,GAAG,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1E,MAAM,IAAI,aAAa,CAAC,GAAG,MAAM,yBAAyB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,kBAAkB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,EAAU,EAAE,KAAkB;QACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAuB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACvD,IAAI,KAAK,GAAG,KAAK,CAAC;QAElB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAEpE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC;YACtD,MAAM,eAAe,GAAG,QAAQ,KAAK,GAAG,CAAC,WAAW,CAAC;YACrD,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAiB,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/H,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACvF,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC5C,OAAO,CAAC,WAAW,GAAG,QAAQ,CAAC;YAC/B,OAAO,CAAC,iBAAiB,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAC/F,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YACvE,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACpC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;YACxB,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,QAAQ,EAAE,CAAC;gBAC9C,MAAM,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,4EAA4E;YAC5E,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrG,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAC1B,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChG,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;gBACrB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ;gBAC9B,SAAS,EAAE,GAAG;aACc,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,GAAc,EAAE,QAAgB,EAAE,WAA2B;QAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACtD,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,SAAS,CAAC,OAAgB,EAAE,EAAU;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,GAAG,GAAG;YAAE,OAAO,GAAG,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC;QACrE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;YAC3C,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5G,CAAC,CAAC;IACL,CAAC;IAED,6GAA6G;IAC7G,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,EAAU,EAAE,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE;QACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;YAC1D,IAAI,GAAG,CAAC,OAAO;gBAAE,MAAM,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtF,MAAM,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,MAAiB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC1F,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACxD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,mGAAmG,CAAC,CAAC;YACpJ,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC/F,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;gBACxC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS;gBACpC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;gBACvE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;gBAC3B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;oBACb,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;wBAAE,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvD,CAAC;aACF,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAA+B,CAAC;YAExG,IAAI,GAAc,CAAC;YACnB,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE;oBAC7C,GAAG,IAAI;oBACP,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,EAAE;oBACX,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;oBACrC,QAAQ,EAAE,CAAC;oBACX,UAAU,EAAE,GAAG;oBACf,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU;oBAChC,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC3C,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE;oBAC7C,GAAG,IAAI;oBACP,MAAM,EAAE,cAAc;oBACtB,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAClD,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE;oBAC7C,GAAG,IAAI;oBACP,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,EAAE;oBACX,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;oBACrC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzF,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;gBACjD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBACnF,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,mBAAmB,EAAE,qBAAqB,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAgB,EAAE,GAAc,EAAE,KAAoB,EAAE,GAAW;QACxF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,mBAAmB,EAAE,qBAAqB,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/F,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;gBAC3C,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG;aAC9G,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;YACjD,MAAM,EAAE,cAAc;YACtB,UAAU;YACV,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ;YAC9B,SAAS,EAAE,GAAG,GAAG,eAAe,CAAC,CAAC,CAAE;YACpC,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAgB,EAAE,GAAc,EAAE,GAAW,EAAE,GAAY;QACnF,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;gBACpD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG;aACzH,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;YACrD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,8FAA8F;QAC9F,IAAI,GAAG,YAAY,WAAW,IAAI,CAAC,GAAG,YAAY,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACzG,MAAM,IAAI,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,iCAAiC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAgB,EAAE,GAAc,EAAE,GAAW,EAAE,MAAc;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;YACpD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG;SACxF,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,GAAc,EAAE,GAAW;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,CAAC;QACnF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IAED,2BAA2B;IAE3B,+FAA+F;IAC/F,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,IAAY,EAAE,EAAU,EAAE,aAAsB;QAC5E,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO;YACL,MAAM,EAAE,KAAK,IAAI,WAAW,EAAE;YAC9B,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1H,WAAW,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,EAAU;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,WAAW,EAAE,EAAE,CAAC;YAC5D,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,KAAoB;QAC1D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,SAAS,GAAG,CAAC,CAAC;QAC3G,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAE,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAc,EAAE,MAAmB,EAAE,EAAU;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YAC3B,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE;SACvJ,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAgB,EAAE,GAAc,EAAE,IAAY,EAAE,OAAgC,EAAE;QACnG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACxG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO;QAChC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YAC3B,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;YAChB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,MAAM,EAAE,OAAO;gBACf,IAAI;gBACJ,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC;gBACpB,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;aAC/C,CAAC;YACF,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC;YACX,aAAa,EAAE,GAAG;YAClB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED,8GAA8G;IACtG,cAAc,CAAC,KAAoB,EAAE,MAAc,EAAE,OAA4B;QACvF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,eAAe;YAAE,MAAM,IAAI,WAAW,CAAC,wCAAwC,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC;QAC9G,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5F,CAAC;IAED,4FAA4F;IACpF,aAAa,CAAC,OAAgB;QACpC,IAAI,CAAC,OAAO,CAAC,mBAAmB;YAAE,OAAO,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;YAC5C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,MAA0B,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,QAAQ,CAAC,OAAgB,EAAE,OAAsB;QACvD,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CAAC,kHAAkH,CAAC,CAAC;QAC5I,CAAC;QACD,IAAI,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,UAAU;YAAE,MAAM,IAAI,WAAW,CAAC,qDAAqD,CAAC,CAAC;QAClI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IAEO,MAAM,CAAC,GAAc;QAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAiB,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,CAAiB;IACtE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;QACT,KAAK,YAAY;YACf,IAAI,CAAC,CAAC,CAAC,kBAAkB;gBAAE,MAAM,IAAI,WAAW,CAAC,sDAAsD,CAAC,CAAC;YACzG,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;gBAC/C,MAAM,IAAI,WAAW,CAAC,gFAAgF,CAAC,CAAC;YAC1G,CAAC;YACD,OAAO;QACT;YACE,MAAM,IAAI,WAAW,CAAC,2DAA2D,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,eAAe,CAAC,QAAgB,EAAE,CAAiB;IAC1D,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC;IACnF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAClH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,wFAAwF;AACxF,SAAS,SAAS,CAAC,KAAoB,EAAE,EAAU;IACjD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC;QACxE,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;QACtE,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACpC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1C,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9C,cAAc,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;QAC5D,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACtD,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,CAAgB;IAC5C,IAAI,CAAC;QACH,MAAM,CAAC,CAAC;IACV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;AACxF,CAAC"}
|