effect 4.1.0 → 4.1.2

package/dist/jose/Jwk.js

@@ -0,0 +1,503 @@
+/**
+ * JSON Web Keys and the algorithm-bound keys the other `effect/jose` modules
+ * use.
+ *
+ * A key is imported for one algorithm and keeps it: a JWS or JWE operation
+ * takes its algorithm from the key, so a token cannot pick another one. The
+ * imported key wraps an `effect/crypto` key object, which redacts itself when
+ * printed and caches its native key.
+ *
+ * Importing honours the JWK's `alg`, `use`, and `key_ops` members, and
+ * rejects RSA keys shorter than 2048 bits.
+ *
+ * @stability unstable
+ * @since 4.1.1
+ */
+import * as Aead from "../crypto/Aead.js";
+import * as Digest from "../crypto/Digest.js";
+import * as KeyFormat from "../crypto/KeyFormat.js";
+import * as Mac from "../crypto/Mac.js";
+import * as SecureRandom from "../crypto/SecureRandom.js";
+import * as Signature from "../crypto/Signature.js";
+import * as Effect from "../Effect.js";
+import * as Base64Url from "../encoding/Base64Url.js";
+import * as Redacted from "../Redacted.js";
+import * as Schema from "../Schema.js";
+import { cryptoFailure, decodeSegment, hasPrivateMembers, invalidArgument, invalidKey, isCanonicalSegment, noPrivateMembers, publicKeyFailure, utf8 } from "./internal/compact.js";
+/**
+ * Schema for RSA, RSA-PSS, and ECDSA signatures with SHA-256, SHA-384, or
+ * SHA-512, and EdDSA signatures with Ed25519.
+ *
+ * @stability unstable
+ * @category schemas
+ * @since 4.1.1
+ */
+export const AsymmetricAlgorithm = /*#__PURE__*/Schema.Literals(["RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512", "EdDSA"]);
+/**
+ * Schema for the JWS algorithms: HS256, HS384, HS512, and the asymmetric
+ * algorithms.
+ *
+ * @stability unstable
+ * @category schemas
+ * @since 4.1.1
+ */
+export const Algorithm = /*#__PURE__*/Schema.Literals(["HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512", "EdDSA"]);
+const metadata = {
+  kid: /*#__PURE__*/Schema.optionalKey(Schema.String),
+  alg: /*#__PURE__*/Schema.optionalKey(Schema.String),
+  use: /*#__PURE__*/Schema.optionalKey(Schema.String),
+  key_ops: /*#__PURE__*/Schema.optionalKey(/*#__PURE__*/Schema.Array(Schema.String))
+};
+const base64url = /*#__PURE__*/Schema.String.check(/*#__PURE__*/Schema.makeFilter(isCanonicalSegment, {
+  expected: "a canonical base64url encoded string"
+}));
+const rsa = {
+  ...metadata,
+  kty: /*#__PURE__*/Schema.Literal("RSA"),
+  n: base64url,
+  e: base64url
+};
+const ec = {
+  ...metadata,
+  kty: /*#__PURE__*/Schema.Literal("EC"),
+  crv: /*#__PURE__*/Schema.Literals(["P-256", "P-384", "P-521"]),
+  x: base64url,
+  y: base64url
+};
+const okp = {
+  ...metadata,
+  kty: /*#__PURE__*/Schema.Literal("OKP"),
+  crv: /*#__PURE__*/Schema.Literal("Ed25519"),
+  x: base64url
+};
+/**
+ * Schema for an RSA, P-256, P-384, P-521, or Ed25519 public JWK. Private and symmetric
+ * members, including RSA factors, are rejected.
+ *
+ * @stability unstable
+ * @category schemas
+ * @since 4.1.1
+ */
+export const PublicJwk = /*#__PURE__*/Schema.Union([/*#__PURE__*/Schema.Struct({
+  ...rsa,
+  ...noPrivateMembers
+}), /*#__PURE__*/Schema.Struct({
+  ...ec,
+  ...noPrivateMembers
+}), /*#__PURE__*/Schema.Struct({
+  ...okp,
+  ...noPrivateMembers
+})]);
+/**
+ * Schema for an RSA, P-256, P-384, P-521, or Ed25519 private JWK. RSA keys need their CRT
+ * members and cannot have more than two primes.
+ *
+ * @stability unstable
+ * @category schemas
+ * @since 4.1.1
+ */
+export const PrivateJwk = /*#__PURE__*/Schema.Union([/*#__PURE__*/Schema.Struct({
+  ...rsa,
+  d: base64url,
+  p: base64url,
+  q: base64url,
+  dp: base64url,
+  dq: base64url,
+  qi: base64url,
+  oth: /*#__PURE__*/Schema.optionalKey(Schema.Never)
+}), /*#__PURE__*/Schema.Struct({
+  ...ec,
+  d: base64url
+}), /*#__PURE__*/Schema.Struct({
+  ...okp,
+  d: base64url
+})]);
+/**
+ * Schema for an octet-sequence JWK.
+ *
+ * @stability unstable
+ * @category schemas
+ * @since 4.1.1
+ */
+export const SecretJwk = /*#__PURE__*/Schema.Struct({
+  ...metadata,
+  kty: /*#__PURE__*/Schema.Literal("oct"),
+  k: Schema.String
+});
+const signatureAlgorithm = (algorithm, modulusLength = 2048) => {
+  switch (algorithm) {
+    case "RS256":
+      return Signature.rsaPkcs1v15({
+        hash: Digest.sha256,
+        modulusLength
+      });
+    case "RS384":
+      return Signature.rsaPkcs1v15({
+        hash: Digest.sha384,
+        modulusLength
+      });
+    case "RS512":
+      return Signature.rsaPkcs1v15({
+        hash: Digest.sha512,
+        modulusLength
+      });
+    case "PS256":
+      return Signature.rsaPss({
+        hash: Digest.sha256,
+        modulusLength
+      });
+    case "PS384":
+      return Signature.rsaPss({
+        hash: Digest.sha384,
+        modulusLength
+      });
+    case "PS512":
+      return Signature.rsaPss({
+        hash: Digest.sha512,
+        modulusLength
+      });
+    case "ES256":
+      return Signature.ecdsaP256;
+    case "ES384":
+      return Signature.ecdsaP384;
+    case "ES512":
+      return Signature.ecdsaP521;
+    case "EdDSA":
+      return Signature.ed25519;
+  }
+};
+const hmacAlgorithms = {
+  HS256: Mac.hmacSha256,
+  HS384: Mac.hmacSha384,
+  HS512: Mac.hmacSha512
+};
+const secretKeyLength = algorithm => algorithm === "dir" ? 32 : hmacAlgorithms[algorithm].hash.outputLength;
+// `key_ops` must allow every operation in `operations`; symmetric keys perform both.
+const checkMetadata = (jwk, algorithm, use, operations) => {
+  if (jwk.alg !== undefined && jwk.alg !== algorithm) {
+    return invalidKey(`The JWK is for ${jwk.alg}, not ${algorithm}`);
+  }
+  if (jwk.use !== undefined && jwk.use !== use) {
+    return invalidKey(`The JWK use is ${jwk.use}, not ${use}`);
+  }
+  if (jwk.key_ops !== undefined && !operations.every(operation => jwk.key_ops.includes(operation))) {
+    return invalidKey(`The JWK key_ops must allow ${operations.join(" and ")}`);
+  }
+  return Effect.void;
+};
+// Checked on the imported key, whose algorithm carries the actual modulus.
+const checkModulus = key => (key.algorithm._tag === "RsaPss" || key.algorithm._tag === "RsaPkcs1v15") && key.algorithm.modulusLength < 2048 ? invalidKey("RSA keys must have at least 2048 bits") : Effect.void;
+// KeyFormat handles only key members; JOSE metadata is handled here.
+const jsonWebKey = jwk => jwk;
+const isPublicJwk = /*#__PURE__*/Schema.is(PublicJwk);
+const isPrivateJwk = /*#__PURE__*/Schema.is(PrivateJwk);
+const exportJwk = (key, algorithm, kid) => KeyFormat.encode(KeyFormat.jwk, key).pipe(Effect.mapBoth({
+  onFailure: cryptoFailure("Could not export the key"),
+  onSuccess: jwk => ({
+    ...jwk,
+    ...(kid === undefined ? {} : {
+      kid
+    }),
+    alg: algorithm,
+    use: "sig"
+  })
+}));
+/**
+ * Generates a key pair for an asymmetric algorithm and returns it as JWKs.
+ *
+ * @see {@link importPrivate} for preparing the private JWK for signing
+ * @see {@link importPublic} for preparing the public JWK for verification
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.1.1
+ */
+export const generateKeyPair = /*#__PURE__*/Effect.fnUntraced(function* (options) {
+  const {
+    algorithm,
+    kid,
+    modulusLength
+  } = options;
+  if (modulusLength !== undefined && (!Number.isSafeInteger(modulusLength) || modulusLength < 2048)) {
+    return yield* invalidArgument("modulusLength must be an integer of at least 2048");
+  }
+  const signature = yield* Signature.Signature;
+  const pair = yield* signature.generateKeyPair(signatureAlgorithm(algorithm, modulusLength)).pipe(Effect.mapError(cryptoFailure(`Could not generate a ${algorithm} key pair`)));
+  const publicJwk = yield* exportJwk(pair.publicKey, algorithm, kid);
+  const privateJwk = yield* exportJwk(pair.privateKey, algorithm, kid);
+  return {
+    publicKey: publicJwk,
+    privateKey: Redacted.make(privateJwk)
+  };
+});
+/**
+ * Generates a redacted secret JWK carrying its `alg`, `use`, and optional `kid`.
+ *
+ * **Details**
+ *
+ * HMAC keys contain 32, 48, or 64 random bytes for HS256, HS384, or HS512.
+ * Direct A256GCM keys contain 32 bytes and use `enc` instead of `sig`.
+ *
+ * @see {@link importSecret} for preparing the JWK for use
+ * @see {@link generateKeyPair} for asymmetric keys
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.1.1
+ */
+export const generateSecret = (algorithm, options) => Effect.map(SecureRandom.SecureRandom.use(random => random.randomBytes(secretKeyLength(algorithm))), bytes => Redacted.make({
+  kty: "oct",
+  k: Base64Url.encode(bytes),
+  alg: algorithm,
+  use: algorithm === "dir" ? "enc" : "sig",
+  ...(options?.kid === undefined ? {} : {
+    kid: options.kid
+  })
+}));
+/**
+ * Imports a public JWK for an asymmetric algorithm.
+ *
+ * **Details**
+ *
+ * The key's family and curve must fit the algorithm, and any `alg`, `use`, or
+ * `key_ops` member must allow verification with it. Private members are
+ * rejected. To import untrusted JSON, decode it with {@link PublicJwk} first.
+ *
+ * @see {@link importPrivate}
+ * @see {@link exportPublic}
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.1.1
+ */
+export const importPublic = /*#__PURE__*/Effect.fnUntraced(function* (jwk, algorithm) {
+  if (hasPrivateMembers(jwk)) return yield* invalidKey("A public JWK cannot contain private members");
+  yield* checkMetadata(jwk, algorithm, "sig", ["verify"]);
+  if (!isPublicJwk(jwk)) return yield* invalidKey("Expected a public JWK with base64url key members");
+  const key = yield* KeyFormat.decodePublic(KeyFormat.jwk, signatureAlgorithm(algorithm), jsonWebKey(jwk)).pipe(Effect.mapError(publicKeyFailure));
+  yield* checkModulus(key);
+  return {
+    _tag: "PublicKey",
+    algorithm,
+    kid: jwk.kid,
+    jwk,
+    key
+  };
+});
+/**
+ * Imports a private JWK for an asymmetric algorithm.
+ *
+ * @see {@link importPkcs8} for importing DER or PEM keys
+ * @see {@link exportPrivate}
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.1.1
+ */
+export const importPrivate = /*#__PURE__*/Effect.fnUntraced(function* (input, algorithm) {
+  const jwk = Redacted.value(input);
+  yield* checkMetadata(jwk, algorithm, "sig", ["sign"]);
+  if (!isPrivateJwk(jwk)) return yield* invalidKey("Expected a private JWK with base64url key members");
+  const key = yield* KeyFormat.decodePrivate(KeyFormat.jwk, signatureAlgorithm(algorithm), jsonWebKey(jwk)).pipe(Effect.mapError(cryptoFailure(`Could not import the private JWK for ${algorithm}`)));
+  yield* checkModulus(key);
+  return {
+    _tag: "PrivateKey",
+    algorithm,
+    kid: jwk.kid,
+    key
+  };
+});
+/**
+ * Imports an SPKI public key from DER bytes or PEM text for an asymmetric algorithm.
+ *
+ * @see {@link importPublic} for importing JWK-encoded keys
+ * @see {@link exportSpki}
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.1.1
+ */
+export const importSpki = /*#__PURE__*/Effect.fnUntraced(function* (input, algorithm, options) {
+  const key = yield* KeyFormat.decodePublic(typeof input === "string" ? KeyFormat.pem(KeyFormat.spki) : KeyFormat.spki, signatureAlgorithm(algorithm), input).pipe(Effect.mapError(publicKeyFailure));
+  yield* checkModulus(key);
+  const jwk = yield* exportJwk(key, algorithm, options?.kid);
+  return {
+    _tag: "PublicKey",
+    algorithm,
+    kid: options?.kid,
+    jwk: jwk,
+    key
+  };
+});
+/**
+ * Imports a redacted PKCS#8 private key from DER bytes or PEM text for an asymmetric algorithm.
+ *
+ * @see {@link importPrivate} for importing JWK-encoded keys
+ * @see {@link exportPkcs8}
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.1.1
+ */
+export const importPkcs8 = /*#__PURE__*/Effect.fnUntraced(function* (input, algorithm, options) {
+  const data = Redacted.value(input);
+  const key = yield* KeyFormat.decodePrivate(typeof data === "string" ? KeyFormat.pem(KeyFormat.pkcs8) : KeyFormat.pkcs8, signatureAlgorithm(algorithm), data).pipe(Effect.mapError(cryptoFailure(`Could not import the PKCS#8 key for ${algorithm}`)));
+  yield* checkModulus(key);
+  return {
+    _tag: "PrivateKey",
+    algorithm,
+    kid: options?.kid,
+    key
+  };
+});
+/**
+ * Imports an octet JWK for HMAC signatures or for direct A256GCM encryption.
+ *
+ * **Details**
+ *
+ * HS256, HS384, and HS512 keys need at least 32, 48, and 64 bytes respectively;
+ * `dir` keys need exactly 32. Any `alg`,
+ * `use`, or `key_ops` member must allow the algorithm; `key_ops` must allow
+ * both of its operations.
+ *
+ * **Example** (Importing an HS256 key)
+ *
+ * ```ts import.meta.vitest
+ * import { Effect, Redacted } from "effect"
+ * import { Jwk } from "effect/jose"
+ *
+ * // Fixed public example material; generate application secrets securely.
+ * const secret = Redacted.make({ kty: "oct", k: "BwcHBwcHBwcHBwcHBwcHBwcHBwcHBwcHBwcHBwcHBwc" } as const)
+ * const key = await Effect.runPromise(Jwk.importSecret(secret, "HS256"))
+ * key.algorithm // => "HS256"
+ * ```
+ *
+ * @see {@link generateSecret}
+ *
+ * @stability unstable
+ * @category constructors
+ * @since 4.1.1
+ */
+export const importSecret = /*#__PURE__*/Effect.fnUntraced(function* (input, algorithm) {
+  const jwk = Redacted.value(input);
+  if (algorithm !== "dir") {
+    yield* checkMetadata(jwk, algorithm, "sig", ["sign", "verify"]);
+  } else {
+    yield* checkMetadata(jwk, algorithm, "enc", ["encrypt", "decrypt"]);
+  }
+  const bytes = jwk.kty === "oct" ? decodeSegment(jwk.k) : undefined;
+  if (bytes === undefined) return yield* invalidKey("Expected an oct JWK with a base64url k member");
+  const length = secretKeyLength(algorithm);
+  if (algorithm === "dir" ? bytes.length !== length : bytes.length < length) {
+    return yield* invalidKey(algorithm === "dir" ? "dir keys must have exactly 32 bytes" : `${algorithm} keys must have at least ${length} bytes`);
+  }
+  const failure = cryptoFailure(`Could not import the ${algorithm} key`);
+  const key = algorithm !== "dir" ? yield* Effect.mapError(Mac.key(hmacAlgorithms[algorithm], bytes), failure) : yield* Effect.mapError(Aead.key(Aead.aes256Gcm, bytes), failure);
+  return {
+    _tag: "SecretKey",
+    algorithm,
+    kid: jwk.kid,
+    key
+  };
+});
+/**
+ * Exports a public key as a JWK carrying its `alg`, `kid`, and `use: "sig"`.
+ *
+ * @see {@link importPublic}
+ * @see {@link exportPrivate}
+ *
+ * @stability unstable
+ * @category encoding
+ * @since 4.1.1
+ */
+export const exportPublic = key => Effect.map(exportJwk(key.key, key.algorithm, key.kid), jwk => jwk);
+/**
+ * Exports a private key as a JWK carrying its `alg`, `kid`, and `use: "sig"`.
+ *
+ * @see {@link importPrivate}
+ *
+ * @stability unstable
+ * @category encoding
+ * @since 4.1.1
+ */
+export const exportPrivate = key => Effect.map(exportJwk(key.key, key.algorithm, key.kid), jwk => Redacted.make(jwk));
+export function exportSpki(key, options) {
+  return KeyFormat.encode(options?.format === "pem" ? KeyFormat.pem(KeyFormat.spki) : KeyFormat.spki, key.key).pipe(Effect.mapError(cryptoFailure("Could not export the SPKI key")));
+}
+export function exportPkcs8(key, options) {
+  return KeyFormat.encode(options?.format === "pem" ? KeyFormat.pem(KeyFormat.pkcs8) : KeyFormat.pkcs8, key.key).pipe(Effect.mapBoth({
+    onFailure: cryptoFailure("Could not export the PKCS#8 key"),
+    onSuccess: Redacted.make
+  }));
+}
+/**
+ * Computes an RFC 7638 JWK thumbprint, encoded as unpadded base64url.
+ *
+ * **Details**
+ *
+ * Uses SHA-256 by default; SHA-384 and SHA-512 are also supported. Only required
+ * key members are hashed, so metadata does not affect the result. Asymmetric
+ * private keys have the same thumbprint as their public keys. A secret key's
+ * thumbprint is a hash of the secret, so treat it as sensitive.
+ *
+ * @see {@link thumbprintUri}
+ *
+ * @stability unstable
+ * @category cryptography
+ * @since 4.1.1
+ */
+export const thumbprint = /*#__PURE__*/Effect.fnUntraced(function* (input, hash = Digest.sha256) {
+  if (hash.name !== "SHA-256" && hash.name !== "SHA-384" && hash.name !== "SHA-512") {
+    return yield* invalidArgument("JWK thumbprints require SHA-256, SHA-384, or SHA-512");
+  }
+  const jwk = jsonWebKey(Redacted.isRedacted(input) ? Redacted.value(input) : "kty" in input ? input : yield* KeyFormat.encode(KeyFormat.jwk, input.key).pipe(Effect.mapError(cryptoFailure("Could not export the key for a thumbprint"))));
+  let required;
+  switch (jwk.kty) {
+    case "RSA":
+      required = {
+        e: jwk.e,
+        kty: jwk.kty,
+        n: jwk.n
+      };
+      break;
+    case "EC":
+      required = {
+        crv: jwk.crv,
+        kty: jwk.kty,
+        x: jwk.x,
+        y: jwk.y
+      };
+      break;
+    case "OKP":
+      required = {
+        crv: jwk.crv,
+        kty: jwk.kty,
+        x: jwk.x
+      };
+      break;
+    case "oct":
+      required = {
+        k: jwk.k,
+        kty: jwk.kty
+      };
+      break;
+    default:
+      return yield* invalidKey("Unsupported JWK key type for a thumbprint");
+  }
+  if (Object.values(required).some(value => typeof value !== "string" || value.length === 0) || (required.kty === "oct" ? !isCanonicalSegment(required.k) : !isPublicJwk(required))) {
+    return yield* invalidKey("Expected a JWK with canonical base64url key members");
+  }
+  const digest = yield* Digest.Digest;
+  return Base64Url.encode(yield* digest.digest(hash, utf8(JSON.stringify(required))));
+});
+/**
+ * Computes an RFC 9278 JWK thumbprint URI using SHA-256 by default.
+ *
+ * @see {@link thumbprint} for supported inputs and hashes
+ *
+ * @stability unstable
+ * @category cryptography
+ * @since 4.1.1
+ */
+export const thumbprintUri = (input, hash = Digest.sha256) => Effect.map(thumbprint(input, hash), value => `urn:ietf:params:oauth:jwk-thumbprint:${hash.name.toLowerCase()}:${value}`);
+//# sourceMappingURL=Jwk.js.map

package/dist/jose/Jwk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Jwk.js","names":[],"sources":["../../src/jose/Jwk.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;;;;;;;;;;;;AAeA,OAAO,KAAK,IAAI,MAAM,mBAAmB;AACzC,OAAO,KAAK,MAAM,MAAM,qBAAqB;AAC7C,OAAO,KAAK,SAAS,MAAM,wBAAwB;AACnD,OAAO,KAAK,GAAG,MAAM,kBAAkB;AACvC,OAAO,KAAK,YAAY,MAAM,2BAA2B;AACzD,OAAO,KAAK,SAAS,MAAM,wBAAwB;AACnD,OAAO,KAAK,MAAM,MAAM,cAAc;AACtC,OAAO,KAAK,SAAS,MAAM,0BAA0B;AACrD,OAAO,KAAK,QAAQ,MAAM,gBAAgB;AAC1C,OAAO,KAAK,MAAM,MAAM,cAAc;AACtC,SACE,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,IAAI,QACC,uBAAuB;AAG9B;;;;;;;;AAQA,OAAO,MAAM,mBAAmB,gBAAG,MAAM,CAAC,QAAQ,CAAC,CACjD,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,CACR,CAAC;AAWF;;;;;;;;AAQA,OAAO,MAAM,SAAS,gBAAG,MAAM,CAAC,QAAQ,CAAC,CACvC,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,CACR,CAAC;AA8BF,MAAM,QAAQ,GAAG;EACf,GAAG,eAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;EACtC,GAAG,eAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;EACtC,GAAG,eAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;EACtC,OAAO,eAAE,MAAM,CAAC,WAAW,cAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;CACxD;AAED,MAAM,SAAS,gBAAG,MAAM,CAAC,MAAM,CAAC,KAAK,cAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,EAAE;EAC1E,QAAQ,EAAE;CACX,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG;EAAE,GAAG,QAAQ;EAAE,GAAG,eAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;EAAE,CAAC,EAAE,SAAS;EAAE,CAAC,EAAE;AAAS,CAAE;AACnF,MAAM,EAAE,GAAG;EACT,GAAG,QAAQ;EACX,GAAG,eAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;EACzB,GAAG,eAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;EACjD,CAAC,EAAE,SAAS;EACZ,CAAC,EAAE;CACJ;AACD,MAAM,GAAG,GAAG;EAAE,GAAG,QAAQ;EAAE,GAAG,eAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;EAAE,GAAG,eAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;EAAE,CAAC,EAAE;AAAS,CAAE;AAErG;;;;;;;;AAQA,OAAO,MAAM,SAAS,gBAAG,MAAM,CAAC,KAAK,CAAC,cACpC,MAAM,CAAC,MAAM,CAAC;EAAE,GAAG,GAAG;EAAE,GAAG;AAAgB,CAAE,CAAC,eAC9C,MAAM,CAAC,MAAM,CAAC;EAAE,GAAG,EAAE;EAAE,GAAG;AAAgB,CAAE,CAAC,eAC7C,MAAM,CAAC,MAAM,CAAC;EAAE,GAAG,GAAG;EAAE,GAAG;AAAgB,CAAE,CAAC,CAC/C,CAAC;AAWF;;;;;;;;AAQA,OAAO,MAAM,UAAU,gBAAG,MAAM,CAAC,KAAK,CAAC,cACrC,MAAM,CAAC,MAAM,CAAC;EACZ,GAAG,GAAG;EACN,CAAC,EAAE,SAAS;EACZ,CAAC,EAAE,SAAS;EACZ,CAAC,EAAE,SAAS;EACZ,EAAE,EAAE,SAAS;EACb,EAAE,EAAE,SAAS;EACb,EAAE,EAAE,SAAS;EACb,GAAG,eAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK;CACrC,CAAC,eACF,MAAM,CAAC,MAAM,CAAC;EAAE,GAAG,EAAE;EAAE,CAAC,EAAE;AAAS,CAAE,CAAC,eACtC,MAAM,CAAC,MAAM,CAAC;EAAE,GAAG,GAAG;EAAE,CAAC,EAAE;AAAS,CAAE,CAAC,CACxC,CAAC;AAWF;;;;;;;AAOA,OAAO,MAAM,SAAS,gBAAG,MAAM,CAAC,MAAM,CAAC;EAAE,GAAG,QAAQ;EAAE,GAAG,eAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;EAAE,CAAC,EAAE,MAAM,CAAC;AAAM,CAAE,CAAC;AAsGrG,MAAM,kBAAkB,GAAG,CAAC,SAA8B,EAAE,aAAa,GAAG,IAAI,KAAyB;EACvG,QAAQ,SAAS;IACf,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,WAAW,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM;QAAE;MAAa,CAAE,CAAC;IACtE,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,WAAW,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM;QAAE;MAAa,CAAE,CAAC;IACtE,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,WAAW,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM;QAAE;MAAa,CAAE,CAAC;IACtE,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM;QAAE;MAAa,CAAE,CAAC;IACjE,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM;QAAE;MAAa,CAAE,CAAC;IACjE,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM;QAAE;MAAa,CAAE,CAAC;IACjE,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,SAAS;IAC5B,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,SAAS;IAC5B,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,SAAS;IAC5B,KAAK,OAAO;MACV,OAAO,SAAS,CAAC,OAAO;EAC5B;AACF,CAAC;AAED,MAAM,cAAc,GAAyC;EAC3D,KAAK,EAAE,GAAG,CAAC,UAAU;EACrB,KAAK,EAAE,GAAG,CAAC,UAAU;EACrB,KAAK,EAAE,GAAG,CAAC;CACZ;AAED,MAAM,eAAe,GAAI,SAA0B,IACjD,SAAS,KAAK,KAAK,GAAG,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY;AAQxE;AACA,MAAM,aAAa,GAAG,CACpB,GAAa,EACb,SAAiB,EACjB,GAAkB,EAClB,UAAiC,KACC;EAClC,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE;IAClD,OAAO,UAAU,CAAC,kBAAkB,GAAG,CAAC,GAAG,SAAS,SAAS,EAAE,CAAC;EAClE;EACA,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE;IAC5C,OAAO,UAAU,CAAC,kBAAkB,GAAG,CAAC,GAAG,SAAS,GAAG,EAAE,CAAC;EAC5D;EACA,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,KAAK,CAAE,SAAS,IAAK,GAAG,CAAC,OAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE;IACnG,OAAO,UAAU,CAAC,8BAA8B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;EAC7E;EACA,OAAO,MAAM,CAAC,IAAI;AACpB,CAAC;AAED;AACA,MAAM,YAAY,GAAI,GAA+C,IACnE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa,KAAK,GAAG,CAAC,SAAS,CAAC,aAAa,GAAG,IAAI,GAC3G,UAAU,CAAC,uCAAuC,CAAC,GACnD,MAAM,CAAC,IAAI;AAEjB;AACA,MAAM,UAAU,GAAI,GAAW,IAA2B,GAAG;AAE7D,MAAM,WAAW,gBAAG,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC;AACxC,MAAM,YAAY,gBAAG,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC;AAE1C,MAAM,SAAS,GAAG,CAChB,GAA+C,EAC/C,SAA8B,EAC9B,GAAuB,KAEvB,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,GAAoB,CAAC,CAAC,IAAI,CACxD,MAAM,CAAC,OAAO,CAAC;EACb,SAAS,EAAE,aAAa,CAAC,0BAA0B,CAAC;EACpD,SAAS,EAAG,GAAG,KAAM;IAAE,GAAG,GAAG;IAAE,IAAI,GAAG,KAAK,SAAS,GAAG,EAAE,GAAG;MAAE;IAAG,CAAE,CAAC;IAAE,GAAG,EAAE,SAAS;IAAE,GAAG,EAAE;EAAK,CAAE;CACnG,CAAC,CACH;AAEH;;;;;;;;;;AAUA,OAAO,MAAM,eAAe,gBAAG,MAAM,CAAC,UAAU,CAAC,WAC/C,OAA+B;EAE/B,MAAM;IAAE,SAAS;IAAE,GAAG;IAAE;EAAa,CAAE,GAAG,OAAO;EACjD,IAAI,aAAa,KAAK,SAAS,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,IAAI,CAAC,EAAE;IACjG,OAAO,OAAO,eAAe,CAAC,mDAAmD,CAAC;EACpF;EACA,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,SAAS;EAC5C,MAAM,IAAI,GAAG,OAAO,SAAS,CAAC,eAAe,CAAC,kBAAkB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAC9F,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,wBAAwB,SAAS,WAAW,CAAC,CAAC,CAC7E;EACD,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC;EAClE,MAAM,UAAU,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC;EACpE,OAAO;IAAE,SAAS,EAAE,SAAsB;IAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAwB;EAAC,CAAE;AACnG,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;AAeA,OAAO,MAAM,cAAc,GAAG,CAC5B,SAA0B,EAC1B,OAA+C,KAE/C,MAAM,CAAC,GAAG,CACR,YAAY,CAAC,YAAY,CAAC,GAAG,CAAE,MAAM,IAAK,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,EACxF,KAAK,IACJ,QAAQ,CAAC,IAAI,CAAC;EACZ,GAAG,EAAE,KAAK;EACV,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;EAC1B,GAAG,EAAE,SAAS;EACd,GAAG,EAAE,SAAS,KAAK,KAAK,GAAG,KAAK,GAAG,KAAK;EACxC,IAAI,OAAO,EAAE,GAAG,KAAK,SAAS,GAAG,EAAE,GAAG;IAAE,GAAG,EAAE,OAAO,CAAC;EAAG,CAAE;CAC3D,CAAC,CACL;AAEH;;;;;;;;;;;;;;;;AAgBA,OAAO,MAAM,YAAY,gBAAG,MAAM,CAAC,UAAU,CAAC,WAC5C,GAAc,EACd,SAA8B;EAE9B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,OAAO,OAAO,UAAU,CAAC,6CAA6C,CAAC;EACnG,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;EACvD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,OAAO,UAAU,CAAC,kDAAkD,CAAC;EACnG,MAAM,GAAG,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAC3G,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAClC;EACD,OAAO,YAAY,CAAC,GAAG,CAAC;EACxB,OAAO;IAAE,IAAI,EAAE,WAAW;IAAE,SAAS;IAAE,GAAG,EAAE,GAAG,CAAC,GAAG;IAAE,GAAG;IAAE;EAAG,CAAE;AACjE,CAAC,CAAC;AAEF;;;;;;;;;;AAUA,OAAO,MAAM,aAAa,gBAAG,MAAM,CAAC,UAAU,CAAC,WAC7C,KAAoC,EACpC,SAA8B;EAE9B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;EACjC,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;EACrD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,OAAO,OAAO,UAAU,CAAC,mDAAmD,CAAC;EACrG,MAAM,GAAG,GAAG,OAAO,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAC5G,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,wCAAwC,SAAS,EAAE,CAAC,CAAC,CACpF;EACD,OAAO,YAAY,CAAC,GAAG,CAAC;EACxB,OAAO;IAAE,IAAI,EAAE,YAAY;IAAE,SAAS;IAAE,GAAG,EAAE,GAAG,CAAC,GAAG;IAAE;EAAG,CAAE;AAC7D,CAAC,CAAC;AAEF;;;;;;;;;;AAUA,OAAO,MAAM,UAAU,gBAAG,MAAM,CAAC,UAAU,CAAC,WAC1C,KAA0B,EAC1B,SAA8B,EAC9B,OAA+C;EAE/C,MAAM,GAAG,GAAG,OAAO,SAAS,CAAC,YAAY,CACvC,OAAO,KAAK,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,EAC1E,kBAAkB,CAAC,SAAS,CAAC,EAC7B,KAAK,CACN,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;EACzC,OAAO,YAAY,CAAC,GAAG,CAAC;EACxB,MAAM,GAAG,GAAG,OAAO,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC;EAC1D,OAAO;IAAE,IAAI,EAAE,WAAW;IAAE,SAAS;IAAE,GAAG,EAAE,OAAO,EAAE,GAAG;IAAE,GAAG,EAAE,GAAgB;IAAE;EAAG,CAAE;AACxF,CAAC,CAAC;AAEF;;;;;;;;;;AAUA,OAAO,MAAM,WAAW,gBAAG,MAAM,CAAC,UAAU,CAAC,WAC3C,KAA6C,EAC7C,SAA8B,EAC9B,OAA+C;EAE/C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;EAClC,MAAM,GAAG,GAAG,OAAO,SAAS,CAAC,aAAa,CACxC,OAAO,IAAI,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,EAC3E,kBAAkB,CAAC,SAAS,CAAC,EAC7B,IAAI,CACL,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAC,CAAC;EAC1F,OAAO,YAAY,CAAC,GAAG,CAAC;EACxB,OAAO;IAAE,IAAI,EAAE,YAAY;IAAE,SAAS;IAAE,GAAG,EAAE,OAAO,EAAE,GAAG;IAAE;EAAG,CAAE;AAClE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,OAAO,MAAM,YAAY,gBAAG,MAAM,CAAC,UAAU,CAAC,WAC5C,KAAmC,EACnC,SAAY;EAEZ,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;EACjC,IAAI,SAAS,KAAK,KAAK,EAAE;IACvB,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;EACjE,CAAC,MAAM;IACL,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;EACrE;EACA,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS;EAClE,IAAI,KAAK,KAAK,SAAS,EAAE,OAAO,OAAO,UAAU,CAAC,+CAA+C,CAAC;EAClG,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC;EACzC,IAAI,SAAS,KAAK,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE;IACzE,OAAO,OAAO,UAAU,CACtB,SAAS,KAAK,KAAK,GACf,qCAAqC,GACrC,GAAG,SAAS,4BAA4B,MAAM,QAAQ,CAC3D;EACH;EACA,MAAM,OAAO,GAAG,aAAa,CAAC,wBAAwB,SAAS,MAAM,CAAC;EACtE,MAAM,GAAG,GAAG,SAAS,KAAK,KAAK,GAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAA0B,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,GAC3F,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC;EACpE,OAAO;IAAE,IAAI,EAAE,WAAW;IAAE,SAAS;IAAE,GAAG,EAAE,GAAG,CAAC,GAAG;IAAE;EAAG,CAAkB;AAC5E,CAAC,CAAC;AAEF;;;;;;;;;;AAUA,OAAO,MAAM,YAAY,GAAI,GAAc,IACzC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,EAAG,GAAG,IAAK,GAAgB,CAAC;AAEnF;;;;;;;;;AASA,OAAO,MAAM,aAAa,GAAI,GAAe,IAC3C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,EAAG,GAAG,IAAK,QAAQ,CAAC,IAAI,CAAC,GAAiB,CAAC,CAAC;AAwBnG,OAAM,SAAU,UAAU,CACxB,GAAc,EACd,OAAyD;EAEzD,OAAO,SAAS,CAAC,MAAM,CACrB,OAAO,EAAE,MAAM,KAAK,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,EAC1E,GAAG,CAAC,GAA0B,CAC/B,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,+BAA+B,CAAC,CAAC,CAAC;AACzE;AAwBA,OAAM,SAAU,WAAW,CACzB,GAAe,EACf,OAAyD;EAEzD,OAAO,SAAS,CAAC,MAAM,CACrB,OAAO,EAAE,MAAM,KAAK,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,EAC5E,GAAG,CAAC,GAA2B,CAChC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAAE,SAAS,EAAE,aAAa,CAAC,iCAAiC,CAAC;IAAE,SAAS,EAAE,QAAQ,CAAC;EAAI,CAAE,CAAC,CAAC;AACnH;AAYA;;;;;;;;;;;;;;;;AAgBA,OAAO,MAAM,UAAU,gBAAG,MAAM,CAAC,UAAU,CAAC,WAC1C,KAAsB,EACtB,IAAI,GAAqB,MAAM,CAAC,MAAM;EAEtC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE;IACjF,OAAO,OAAO,eAAe,CAAC,sDAAsD,CAAC;EACvF;EACA,MAAM,GAAG,GAAG,UAAU,CACpB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,KAAK,GACjE,KAAK,GACH,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,GAAoB,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,2CAA2C,CAAC,CAAC,CAC5E,CACJ;EACD,IAAI,QAA4C;EAChD,QAAQ,GAAG,CAAC,GAAG;IACb,KAAK,KAAK;MACR,QAAQ,GAAG;QAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAAE,GAAG,EAAE,GAAG,CAAC,GAAG;QAAE,CAAC,EAAE,GAAG,CAAC;MAAC,CAAE;MAC/C;IACF,KAAK,IAAI;MACP,QAAQ,GAAG;QAAE,GAAG,EAAE,GAAG,CAAC,GAAG;QAAE,GAAG,EAAE,GAAG,CAAC,GAAG;QAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAAE,CAAC,EAAE,GAAG,CAAC;MAAC,CAAE;MAC7D;IACF,KAAK,KAAK;MACR,QAAQ,GAAG;QAAE,GAAG,EAAE,GAAG,CAAC,GAAG;QAAE,GAAG,EAAE,GAAG,CAAC,GAAG;QAAE,CAAC,EAAE,GAAG,CAAC;MAAC,CAAE;MACnD;IACF,KAAK,KAAK;MACR,QAAQ,GAAG;QAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAAE,GAAG,EAAE,GAAG,CAAC;MAAG,CAAE;MACrC;IACF;MACE,OAAO,OAAO,UAAU,CAAC,2CAA2C,CAAC;EACzE;EACA,IACE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAE,KAAK,IAAK,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,KACvF,QAAQ,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAE,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EACpF;IACA,OAAO,OAAO,UAAU,CAAC,qDAAqD,CAAC;EACjF;EACA,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM;EACnC,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC,CAAC;AAEF;;;;;;;;;AASA,OAAO,MAAM,aAAa,GAAG,CAC3B,KAAsB,EACtB,IAAI,GAAqB,MAAM,CAAC,MAAM,KAEtC,MAAM,CAAC,GAAG,CACR,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,EACtB,KAAK,IAAK,wCAAwC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,EAAE,CACtF","ignoreList":[]}