dotdo 0.0.1 → 0.0.2

package/dist/api/middleware/auth.js

@@ -0,0 +1,544 @@
+import { HTTPException } from 'hono/http-exception';
+import * as jose from 'jose';
+// ============================================================================
+// Default Configuration
+// ============================================================================
+const defaultConfig = {
+    cookieName: 'session',
+    publicPaths: ['/health', '/public'],
+};
+/**
+ * Simple LRU (Least Recently Used) cache for in-memory session storage.
+ * Provides O(1) get/set operations with automatic expiration.
+ */
+export class MemoryCache {
+    cache = new Map();
+    maxSize;
+    defaultTtlMs;
+    constructor(maxSize = 1000, defaultTtlSeconds = 300) {
+        this.maxSize = maxSize;
+        this.defaultTtlMs = defaultTtlSeconds * 1000;
+    }
+    get(key) {
+        const entry = this.cache.get(key);
+        if (!entry) {
+            return null;
+        }
+        // Check expiration
+        if (Date.now() > entry.expiresAt) {
+            this.cache.delete(key);
+            return null;
+        }
+        // LRU: Move to end (most recently used)
+        this.cache.delete(key);
+        this.cache.set(key, entry);
+        return entry.value;
+    }
+    set(key, value, ttlSeconds) {
+        // If at capacity, remove oldest entry (first in map)
+        if (this.cache.size >= this.maxSize) {
+            const oldestKey = this.cache.keys().next().value;
+            if (oldestKey) {
+                this.cache.delete(oldestKey);
+            }
+        }
+        const ttlMs = ttlSeconds ? ttlSeconds * 1000 : this.defaultTtlMs;
+        this.cache.set(key, {
+            value,
+            expiresAt: Date.now() + ttlMs,
+        });
+    }
+    delete(key) {
+        this.cache.delete(key);
+    }
+    clear() {
+        this.cache.clear();
+    }
+    get size() {
+        return this.cache.size;
+    }
+    /**
+     * Remove expired entries. Call periodically for cleanup.
+     */
+    prune() {
+        const now = Date.now();
+        let removed = 0;
+        for (const [key, entry] of this.cache) {
+            if (now > entry.expiresAt) {
+                this.cache.delete(key);
+                removed++;
+            }
+        }
+        return removed;
+    }
+}
+// Global session memory cache instance (L1 cache before KV)
+let sessionMemoryCache = null;
+function getSessionMemoryCache(config) {
+    if (config.enableMemoryCache === false) {
+        return null;
+    }
+    // Only use memory cache if KV is also configured (L1 before L2)
+    if (!config.sessionCache && config.enableMemoryCache !== true) {
+        return null;
+    }
+    if (!sessionMemoryCache) {
+        sessionMemoryCache = new MemoryCache(config.memoryCacheMaxSize ?? 1000, config.sessionCacheTtl ?? 300);
+    }
+    return sessionMemoryCache;
+}
+/**
+ * Clear the in-memory session cache.
+ * Useful for testing or when sessions are invalidated.
+ */
+export function clearSessionMemoryCache() {
+    sessionMemoryCache?.clear();
+}
+// ============================================================================
+// API Key Loading from Environment/KV (SECURITY FIX)
+// ============================================================================
+/**
+ * Load API keys from environment variable.
+ * API_KEYS should be a JSON string mapping key -> ApiKeyConfig
+ *
+ * Example env.API_KEYS:
+ * {
+ *   "prod-key-123": { "userId": "user-1", "role": "user", "name": "Production Key" },
+ *   "admin-key-456": { "userId": "admin-1", "role": "admin", "name": "Admin Key" }
+ * }
+ *
+ * SECURITY: API keys must NEVER be hardcoded in source code.
+ * They must come from environment variables or KV storage.
+ */
+export function loadApiKeysFromEnv(env) {
+    const apiKeys = new Map();
+    const apiKeysJson = env.API_KEYS;
+    if (!apiKeysJson) {
+        return apiKeys;
+    }
+    try {
+        const parsed = JSON.parse(apiKeysJson);
+        for (const [key, config] of Object.entries(parsed)) {
+            apiKeys.set(key, config);
+        }
+    }
+    catch {
+        // Invalid JSON - return empty map
+        console.warn('Failed to parse API_KEYS environment variable');
+    }
+    return apiKeys;
+}
+// Runtime API key store - used for dynamically registered keys
+// SECURITY: This should only be used for runtime-registered keys.
+// Production keys should be loaded from environment via loadApiKeysFromEnv.
+const runtimeApiKeys = new Map();
+/**
+ * Create an API key loader that checks multiple sources in order:
+ * 1. Environment variables (env.API_KEYS)
+ * 2. Runtime-registered keys (via registerApiKey)
+ * 3. KV storage
+ *
+ * Returns a function that can look up API key configurations.
+ *
+ * @param env - Environment bindings from the Cloudflare Worker context
+ * @returns Async function to look up API key configurations
+ */
+export function getApiKeyLoader(env) {
+    // Load static keys from environment
+    const envKeys = loadApiKeysFromEnv(env);
+    // Get KV binding if available
+    const kv = env.KV;
+    return async (apiKey) => {
+        // Check env keys first (faster, no network call)
+        const envConfig = envKeys.get(apiKey);
+        if (envConfig) {
+            return envConfig;
+        }
+        // Check runtime-registered keys
+        const runtimeConfig = runtimeApiKeys.get(apiKey);
+        if (runtimeConfig) {
+            return runtimeConfig;
+        }
+        // Fall back to KV lookup
+        if (kv) {
+            try {
+                const kvValue = await kv.get(`api-key:${apiKey}`);
+                if (kvValue) {
+                    return JSON.parse(kvValue);
+                }
+            }
+            catch {
+                // KV lookup failed - return undefined
+            }
+        }
+        return undefined;
+    };
+}
+// ============================================================================
+// JWT Verification
+// ============================================================================
+let jwks = null;
+async function verifyJWT(token, config) {
+    try {
+        // Try JWKS first if configured
+        if (config.jwksUrl) {
+            if (!jwks) {
+                jwks = jose.createRemoteJWKSet(new URL(config.jwksUrl));
+            }
+            const { payload } = await jose.jwtVerify(token, jwks);
+            return payload;
+        }
+        // Fall back to symmetric secret
+        if (config.jwtSecret) {
+            const secret = new TextEncoder().encode(config.jwtSecret);
+            const { payload } = await jose.jwtVerify(token, secret);
+            return payload;
+        }
+        throw new Error('No JWT verification method configured');
+    }
+    catch (error) {
+        if (error instanceof jose.errors.JWTExpired) {
+            throw new HTTPException(401, { message: 'Token expired' });
+        }
+        if (error instanceof jose.errors.JWTInvalid) {
+            throw new HTTPException(401, { message: 'Invalid token' });
+        }
+        throw new HTTPException(401, { message: 'Token verification failed' });
+    }
+}
+// ============================================================================
+// Token Extraction
+// ============================================================================
+function extractBearerToken(authHeader) {
+    if (!authHeader)
+        return null;
+    const parts = authHeader.split(' ');
+    if (parts.length !== 2 || parts[0].toLowerCase() !== 'bearer')
+        return null;
+    return parts[1];
+}
+function extractApiKey(c) {
+    return c.req.header('x-api-key') || null;
+}
+function extractSessionCookie(c, cookieName) {
+    const cookie = c.req.header('cookie');
+    if (!cookie)
+        return null;
+    const cookies = cookie.split(';').reduce((acc, curr) => {
+        const [key, value] = curr.trim().split('=');
+        acc[key] = value;
+        return acc;
+    }, {});
+    return cookies[cookieName] || null;
+}
+// ============================================================================
+// Authentication Methods
+// ============================================================================
+async function authenticateJWT(token, config) {
+    const payload = await verifyJWT(token, config);
+    return {
+        userId: payload.sub,
+        email: payload.email,
+        role: payload.role || 'user',
+        permissions: payload.permissions,
+        method: 'jwt',
+    };
+}
+async function authenticateApiKey(apiKey, loader) {
+    const keyConfig = await loader(apiKey);
+    if (!keyConfig) {
+        throw new HTTPException(401, { message: 'Invalid API key' });
+    }
+    return {
+        userId: keyConfig.userId,
+        role: keyConfig.role,
+        permissions: keyConfig.permissions,
+        method: 'apikey',
+    };
+}
+/**
+ * Cache key for session tokens in KV
+ */
+function getSessionCacheKey(token) {
+    return `session:${token}`;
+}
+/**
+ * Check if a cached session is expired
+ */
+function isCachedSessionExpired(cached) {
+    if (!cached.expiresAt) {
+        return false;
+    }
+    return new Date(cached.expiresAt) <= new Date();
+}
+/**
+ * Convert cached session to auth context
+ */
+function cachedSessionToAuthContext(cached) {
+    return {
+        userId: cached.userId,
+        email: cached.email,
+        role: cached.role,
+        method: 'session',
+    };
+}
+async function authenticateSession(sessionToken, config) {
+    // Check if session validator is configured
+    if (!config.validateSession) {
+        throw new HTTPException(401, { message: 'Session validation not configured' });
+    }
+    const cacheKey = getSessionCacheKey(sessionToken);
+    const memoryCache = getSessionMemoryCache(config);
+    const ttl = config.sessionCacheTtl ?? 300; // Default 5 minutes
+    // L1: Try memory cache first (fastest)
+    if (memoryCache) {
+        const memoryCached = memoryCache.get(cacheKey);
+        if (memoryCached) {
+            if (isCachedSessionExpired(memoryCached)) {
+                memoryCache.delete(cacheKey);
+            }
+            else {
+                return cachedSessionToAuthContext(memoryCached);
+            }
+        }
+    }
+    // L2: Try KV cache (if configured)
+    if (config.sessionCache) {
+        try {
+            const cached = await config.sessionCache.get(cacheKey, 'json');
+            if (cached) {
+                if (isCachedSessionExpired(cached)) {
+                    // Session expired, delete from cache and continue to validate
+                    await config.sessionCache.delete(cacheKey);
+                    memoryCache?.delete(cacheKey);
+                }
+                else {
+                    // Populate L1 cache from L2
+                    memoryCache?.set(cacheKey, cached, ttl);
+                    return cachedSessionToAuthContext(cached);
+                }
+            }
+        }
+        catch {
+            // Cache error - continue without cache
+        }
+    }
+    // L3: Validate session using the configured validator (slowest)
+    const session = await config.validateSession(sessionToken);
+    if (!session) {
+        throw new HTTPException(401, { message: 'Invalid session' });
+    }
+    // Check if session is expired
+    if (session.expiresAt && session.expiresAt <= new Date()) {
+        throw new HTTPException(401, { message: 'Session expired' });
+    }
+    const cacheData = {
+        userId: session.userId,
+        email: session.email,
+        role: session.role || 'user',
+        expiresAt: session.expiresAt?.toISOString(),
+    };
+    // Write to both caches
+    // L1: Memory cache
+    memoryCache?.set(cacheKey, cacheData, ttl);
+    // L2: KV cache
+    if (config.sessionCache) {
+        try {
+            await config.sessionCache.put(cacheKey, JSON.stringify(cacheData), {
+                expirationTtl: ttl,
+            });
+        }
+        catch {
+            // Cache write error - continue without caching
+        }
+    }
+    return cachedSessionToAuthContext(cacheData);
+}
+// ============================================================================
+// Middleware
+// ============================================================================
+/**
+ * Main authentication middleware
+ * Attempts to authenticate using JWT, API key, or session cookie
+ */
+export function authMiddleware(config = {}) {
+    const mergedConfig = { ...defaultConfig, ...config };
+    return async (c, next) => {
+        const path = c.req.path;
+        // Skip auth for public paths
+        if (mergedConfig.publicPaths?.some((p) => path.startsWith(p))) {
+            return next();
+        }
+        // Get environment bindings for API key loading
+        // SECURITY: API keys are loaded from env.API_KEYS or KV, never hardcoded
+        const env = c.env;
+        const apiKeyLoader = getApiKeyLoader(env ?? {});
+        let authContext = null;
+        // Try JWT Bearer token first
+        const bearerToken = extractBearerToken(c.req.header('authorization'));
+        if (bearerToken) {
+            try {
+                authContext = await authenticateJWT(bearerToken, mergedConfig);
+            }
+            catch (error) {
+                if (error instanceof HTTPException)
+                    throw error;
+                // Continue to try other methods
+            }
+        }
+        // Try API key (loaded from environment/KV)
+        if (!authContext) {
+            const apiKey = extractApiKey(c);
+            if (apiKey) {
+                authContext = await authenticateApiKey(apiKey, apiKeyLoader);
+            }
+        }
+        // Try session cookie
+        if (!authContext && mergedConfig.cookieName) {
+            const sessionToken = extractSessionCookie(c, mergedConfig.cookieName);
+            if (sessionToken) {
+                try {
+                    authContext = await authenticateSession(sessionToken, mergedConfig);
+                }
+                catch {
+                    // Continue without auth
+                }
+            }
+        }
+        // Set context for downstream handlers
+        if (authContext) {
+            c.set('auth', authContext);
+            c.set('user', {
+                id: authContext.userId,
+                email: authContext.email,
+                role: authContext.role,
+                permissions: authContext.permissions,
+            });
+            c.set('session', { userId: authContext.userId });
+        }
+        return next();
+    };
+}
+/**
+ * Require authentication - returns 401 if not authenticated
+ */
+export function requireAuth() {
+    return async (c, next) => {
+        const auth = c.get('auth');
+        if (!auth) {
+            throw new HTTPException(401, { message: 'Authentication required' });
+        }
+        return next();
+    };
+}
+/**
+ * Require specific role - returns 403 if role doesn't match
+ */
+export function requireRole(role) {
+    return async (c, next) => {
+        const auth = c.get('auth');
+        if (!auth) {
+            throw new HTTPException(401, { message: 'Authentication required' });
+        }
+        // Admin can access everything
+        if (auth.role === 'admin') {
+            return next();
+        }
+        // Check if user has required role
+        if (auth.role !== role) {
+            throw new HTTPException(403, { message: `Role '${role}' required` });
+        }
+        return next();
+    };
+}
+/**
+ * Require specific permission
+ */
+export function requirePermission(permission) {
+    return async (c, next) => {
+        const auth = c.get('auth');
+        if (!auth) {
+            throw new HTTPException(401, { message: 'Authentication required' });
+        }
+        // Admin has all permissions
+        if (auth.role === 'admin') {
+            return next();
+        }
+        if (!auth.permissions?.includes(permission)) {
+            throw new HTTPException(403, { message: `Permission '${permission}' required` });
+        }
+        return next();
+    };
+}
+// ============================================================================
+// API Key Management (for runtime)
+// ============================================================================
+export function registerApiKey(key, config) {
+    runtimeApiKeys.set(key, config);
+}
+export function revokeApiKey(key) {
+    return runtimeApiKeys.delete(key);
+}
+export function validateApiKey(key) {
+    return runtimeApiKeys.get(key);
+}
+// ============================================================================
+// JWT Token Generation (for testing/development)
+// ============================================================================
+export async function generateJWT(payload, secret, expiresIn = '1h') {
+    const secretKey = new TextEncoder().encode(secret);
+    const jwt = await new jose.SignJWT(payload).setProtectedHeader({ alg: 'HS256' }).setIssuedAt().setExpirationTime(expiresIn).sign(secretKey);
+    return jwt;
+}
+/**
+ * Create a session validator function from a Drizzle database.
+ *
+ * This factory creates a validator that:
+ * 1. Looks up the session by token in the sessions table
+ * 2. Verifies the session hasn't expired
+ * 3. Fetches user details for the session
+ *
+ * @param db - Drizzle database instance with sessions and users tables
+ * @returns SessionValidator function for use with authMiddleware
+ *
+ * @example
+ * ```typescript
+ * import { drizzle } from 'drizzle-orm/d1'
+ * import { authMiddleware, createSessionValidator } from './middleware/auth'
+ * import * as schema from '../db'
+ *
+ * const db = drizzle(env.DB, { schema })
+ * const validateSession = createSessionValidator(db)
+ *
+ * app.use('*', authMiddleware({
+ *   validateSession,
+ *   sessionCache: env.KV,
+ * }))
+ * ```
+ */
+export function createSessionValidator(db) {
+    return async (token) => {
+        // Look up session by token
+        const session = await db.query.sessions.findFirst({
+            where: (t, { eq, and, gt }) => and(eq(t.token, token), gt(t.expiresAt, new Date())),
+        });
+        if (!session) {
+            return null;
+        }
+        // Get user details
+        const user = await db.query.users.findFirst({
+            where: (t, { eq }) => eq(t.id, session.userId),
+        });
+        if (!user) {
+            return null;
+        }
+        return {
+            userId: user.id,
+            email: user.email,
+            role: user.role || 'user',
+            expiresAt: session.expiresAt,
+        };
+    };
+}
+export default authMiddleware;
+//# sourceMappingURL=auth.js.map

package/dist/api/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../api/middleware/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAwG5B,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,aAAa,GAAe;IAChC,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;CACpC,CAAA;AAWD;;;GAGG;AACH,MAAM,OAAO,WAAW;IACd,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrC,OAAO,CAAQ;IACf,YAAY,CAAQ;IAErC,YAAY,UAAkB,IAAI,EAAE,oBAA4B,GAAG;QACjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,YAAY,GAAG,iBAAiB,GAAG,IAAI,CAAA;IAC9C,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAA;QACb,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAE1B,OAAO,KAAK,CAAC,KAAK,CAAA;IACpB,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAQ,EAAE,UAAmB;QAC5C,qDAAqD;QACrD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YAChD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAA;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC9B,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAA;IACxB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACtB,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;CACF;AAYD,4DAA4D;AAC5D,IAAI,kBAAkB,GAAsC,IAAI,CAAA;AAEhE,SAAS,qBAAqB,CAAC,MAAkB;IAC/C,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,gEAAgE;IAChE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,IAAI,WAAW,CAClC,MAAM,CAAC,kBAAkB,IAAI,IAAI,EACjC,MAAM,CAAC,eAAe,IAAI,GAAG,CAC9B,CAAA;IACH,CAAC;IACD,OAAO,kBAAkB,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,kBAAkB,EAAE,KAAK,EAAE,CAAA;AAC7B,CAAC;AAED,+EAA+E;AAC/E,qDAAqD;AACrD,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAA4B;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAE/C,MAAM,WAAW,GAAG,GAAG,CAAC,QAA8B,CAAA;IACtD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAiC,CAAA;QACtE,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;QAClC,OAAO,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAA;IAC/D,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+DAA+D;AAC/D,kEAAkE;AAClE,4EAA4E;AAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwB,CAAA;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAC7B,GAA4B;IAE5B,oCAAoC;IACpC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAEvC,8BAA8B;IAC9B,MAAM,EAAE,GAAG,GAAG,CAAC,EAAkE,CAAA;IAEjF,OAAO,KAAK,EAAE,MAAc,EAAqC,EAAE;QACjE,iDAAiD;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,gCAAgC;QAChC,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAA;QACtB,CAAC;QAED,yBAAyB;QACzB,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAA;gBACjD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB,CAAA;gBAC5C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,IAAI,IAAI,GAAgC,IAAI,CAAA;AAE5C,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,MAAkB;IACxD,IAAI,CAAC;QACH,+BAA+B;QAC/B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACrD,OAAO,OAAqB,CAAA;QAC9B,CAAC;QAED,gCAAgC;QAChC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YACvD,OAAO,OAAqB,CAAA;QAC9B,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,kBAAkB,CAAC,UAA8B;IACxD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1E,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI,CAAA;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAU,EAAE,UAAkB;IAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC3C,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QAChB,OAAO,GAAG,CAAA;IACZ,CAAC,EACD,EAA4B,CAC7B,CAAA;IAED,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAA;AACpC,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,MAAkB;IAC9D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAE9C,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,GAAG;QACnB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM;QAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,KAAK;KACd,CAAA;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAc,EACd,MAA0D;IAE1D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,MAAM,EAAE,QAAQ;KACjB,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,WAAW,KAAK,EAAE,CAAA;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,MAAqB;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CAAC,MAAqB;IACvD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,SAAS;KAClB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,YAAoB,EAAE,MAAkB;IACzE,2CAA2C;IAC3C,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,IAAI,GAAG,CAAA,CAAC,oBAAoB;IAE9D,uCAAuC;IACvC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC9C,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC9B,CAAC;iBAAM,CAAC;gBACN,OAAO,0BAA0B,CAAC,YAAY,CAAC,CAAA;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAgB,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC7E,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnC,8DAA8D;oBAC9D,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;oBAC1C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAC/B,CAAC;qBAAM,CAAC;oBACN,4BAA4B;oBAC5B,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;oBACvC,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAA;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;IAE1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,SAAS,GAAkB;QAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE;KAC5C,CAAA;IAED,uBAAuB;IACvB,mBAAmB;IACnB,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAE1C,eAAe;IACf,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBACjE,aAAa,EAAE,GAAG;aACnB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED,OAAO,0BAA0B,CAAC,SAAS,CAAC,CAAA;AAC9C,CAAC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAqB,EAAE;IACpD,MAAM,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,MAAM,EAAE,CAAA;IAEpD,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA;QAEvB,6BAA6B;QAC7B,IAAI,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,+CAA+C;QAC/C,yEAAyE;QACzE,MAAM,GAAG,GAAG,CAAC,CAAC,GAA0C,CAAA;QACxD,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;QAE/C,IAAI,WAAW,GAAuB,IAAI,CAAA;QAE1C,6BAA6B;QAC7B,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAA;QACrE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa;oBAAE,MAAM,KAAK,CAAA;gBAC/C,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC/B,IAAI,MAAM,EAAE,CAAC;gBACX,WAAW,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,oBAAoB,CAAC,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAA;YACrE,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,WAAW,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;gBACrE,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,WAAW,EAAE,CAAC;YAChB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;YAC1B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;gBACZ,EAAE,EAAE,WAAW,CAAC,MAAM;gBACtB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,WAAW,EAAE,WAAW,CAAC,WAAW;aAC7B,CAAC,CAAA;YACV,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAa,CAAC,CAAA;QAC7D,CAAC;QAED,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAA;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAA;QACtE,CAAC;QACD,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAsB;IAChD,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAA;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAA;QACtE,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,IAAI,YAAY,EAAE,CAAC,CAAA;QACtE,CAAC;QAED,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAA;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAA;QACtE,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,eAAe,UAAU,YAAY,EAAE,CAAC,CAAA;QAClF,CAAC;QAED,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,MAAoB;IAC9D,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AAChC,CAAC;AAED,+EAA+E;AAC/E,iDAAiD;AACjD,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwC,EAAE,MAAc,EAAE,YAAoB,IAAI;IAClH,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAElD,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAA0B,CAAC,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAE9J,OAAO,GAAG,CAAA;AACZ,CAAC;AAkCD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAmB;IACxD,OAAO,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7B,2BAA2B;QAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAChD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;SACpF,CAAC,CAAA;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAA;QACb,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC;SAC/C,CAAC,CAAA;QAEF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAA;QACb,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAG,IAAI,CAAC,IAAyB,IAAI,MAAM;YAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED,eAAe,cAAc,CAAA"}