ftown 0.20.8 → 0.21.0

package/dist/security/ledger/ledger.js

@@ -0,0 +1,597 @@
+import { AUTHORITY_CONSENT_DOMAIN, LEDGER_DOMAIN, LEDGER_LIMITS, SIGNIN_DOMAIN } from './protocol.js';
+import { verifyPasskeyAssertion } from './webauthn.js';
+const messages = {
+    invalid_ledger: 'Account ledger could not be verified.',
+    ledger_other_account: 'Account ledger entry belongs to a different account.',
+    ledger_revoked: 'Account ledger entry refers to a revoked key.',
+    ledger_limit: 'Account ledger reached its supported capacity.',
+};
+/** No untrusted text, key material or underlying crypto error enters this error. */
+export class LedgerError extends Error {
+    code;
+    constructor(code) {
+        super(messages[code]);
+        this.code = code;
+        this.name = 'LedgerError';
+    }
+}
+const encoder = new TextEncoder();
+const MAX_TIME = 253402300799999;
+const MAX_ORIGINS = 16;
+const MAX_ORIGIN_LENGTH = 512;
+const MAX_CREDENTIAL_ID_BYTES = 1023;
+const MAX_AUTHENTICATOR_DATA_BYTES = 4096;
+const MAX_CLIENT_DATA_BYTES = 4096;
+const MAX_DER_SIGNATURE_BYTES = 72;
+const MAX_STICKY_IDS = 8 * LEDGER_LIMITS.maxTransitions;
+function fail(code = 'invalid_ledger') {
+    throw new LedgerError(code);
+}
+function isPlain(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    // Any realm's Object.prototype or null; class instances and exotic prototypes are refused.
+    return prototype === null || Object.getPrototypeOf(prototype) === null;
+}
+function object(value) {
+    return isPlain(value) ? value : fail();
+}
+function exact(value, keys) {
+    const record = object(value);
+    const own = Object.keys(record);
+    if (own.length !== keys.length || own.some(key => keys.indexOf(key) === -1))
+        return fail();
+    return record;
+}
+function each(value, max, parse, code = 'invalid_ledger') {
+    if (!Array.isArray(value))
+        return fail();
+    const items = value;
+    if (items.length > max)
+        return fail(code);
+    const result = [];
+    for (let index = 0; index < items.length; index += 1)
+        result.push(parse(items[index]));
+    return result;
+}
+function string(value, max) {
+    return typeof value === 'string' && value.length <= max ? value : fail();
+}
+function b64url(data) {
+    let binary = '';
+    for (let index = 0; index < data.length; index += 1)
+        binary += String.fromCharCode(data[index]);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** Canonical unpadded base64url only; the length bound is checked before decoding. */
+function decode(value, min, max) {
+    const text = string(value, Math.ceil(max * 4 / 3));
+    if (!/^[A-Za-z0-9_-]+$/.test(text))
+        return fail();
+    let binary;
+    try {
+        binary = atob(text.replace(/-/g, '+').replace(/_/g, '/'));
+    }
+    catch {
+        return fail();
+    }
+    if (binary.length < min || binary.length > max)
+        return fail();
+    const result = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index += 1)
+        result[index] = binary.charCodeAt(index);
+    if (b64url(result) !== text)
+        return fail();
+    return result;
+}
+const fingerprint = (value) => b64url(decode(value, 32, 32));
+const credential = (value) => b64url(decode(value, 1, MAX_CREDENTIAL_ID_BYTES));
+function point(value) {
+    const raw = decode(value, 65, 65);
+    return raw[0] === 4 ? b64url(raw) : fail();
+}
+function token(value) {
+    const text = string(value, 200);
+    return /^[A-Za-z0-9_-]{1,200}$/.test(text) ? text : fail();
+}
+function label(value) {
+    const text = string(value, LEDGER_LIMITS.maxLabelLength);
+    // C0/C1 controls, zero-width and bidi controls, BOM, unpaired surrogates: refused, never silently rewritten in a signed label.
+    return /[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u202a-\u202e\u2066-\u2069\ufeff\ud800-\udfff]/u.test(text) ? fail() : text;
+}
+function time(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 && value <= MAX_TIME ? value : fail();
+}
+function count(value, min) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= min && value <= LEDGER_LIMITS.maxTransitions ? value : fail();
+}
+function relyingParty(value) {
+    const text = string(value, 253);
+    return /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/.test(text) ? text : fail();
+}
+/** A serialized origin exactly as URL.origin prints it: https, or http only for localhost. */
+function origin(value) {
+    const text = string(value, MAX_ORIGIN_LENGTH);
+    let url;
+    try {
+        url = new URL(text);
+    }
+    catch {
+        return fail();
+    }
+    if (url.origin !== text)
+        return fail();
+    return url.protocol === 'https:' || (url.protocol === 'http:' && url.hostname === 'localhost') ? text : fail();
+}
+function parseSignature(value) {
+    const record = exact(value, ['authenticatorData', 'clientDataJSON', 'signature']);
+    return {
+        authenticatorData: b64url(decode(record.authenticatorData, 37, MAX_AUTHENTICATOR_DATA_BYTES)),
+        clientDataJSON: b64url(decode(record.clientDataJSON, 1, MAX_CLIENT_DATA_BYTES)),
+        signature: b64url(decode(record.signature, 8, MAX_DER_SIGNATURE_BYTES)),
+    };
+}
+function parseEndpoint(value, kind) {
+    const record = exact(value, ['version', 'id', 'ownerId', 'kind', 'publicKey']);
+    if (record.version !== 1 || record.kind !== kind)
+        return fail();
+    return { version: 1, id: fingerprint(record.id), ownerId: fingerprint(record.ownerId), kind, publicKey: point(record.publicKey) };
+}
+function parseAuthority(value) {
+    const record = exact(value, ['credentialId', 'publicKey', 'label', 'addedAt']);
+    return { credentialId: credential(record.credentialId), publicKey: point(record.publicKey), label: label(record.label), addedAt: time(record.addedAt) };
+}
+function parseDevice(value) {
+    const record = exact(value, ['endpoint', 'authPublicKey', 'label', 'approvedAt']);
+    const parsed = { endpoint: parseEndpoint(record.endpoint, 'browser'), authPublicKey: point(record.authPublicKey), label: label(record.label), approvedAt: time(record.approvedAt) };
+    return parsed.authPublicKey === parsed.endpoint.publicKey ? fail() : parsed;
+}
+function parseBridge(value) {
+    const record = exact(value, ['bridgeId', 'endpoint', 'authPublicKey', 'label', 'approvedAt']);
+    const parsed = {
+        bridgeId: token(record.bridgeId), endpoint: parseEndpoint(record.endpoint, 'bridge'),
+        authPublicKey: point(record.authPublicKey), label: label(record.label), approvedAt: time(record.approvedAt),
+    };
+    return parsed.authPublicKey === parsed.endpoint.publicKey ? fail() : parsed;
+}
+function parseOperation(value) {
+    const record = object(value);
+    switch (record.type) {
+        case 'add_device': return { type: 'add_device', device: parseDevice(exact(record, ['type', 'device']).device) };
+        case 'revoke_device': return { type: 'revoke_device', endpointId: fingerprint(exact(record, ['type', 'endpointId']).endpointId) };
+        case 'add_bridge': return { type: 'add_bridge', bridge: parseBridge(exact(record, ['type', 'bridge']).bridge) };
+        case 'revoke_bridge': return { type: 'revoke_bridge', bridgeId: token(exact(record, ['type', 'bridgeId']).bridgeId) };
+        case 'add_authority': {
+            const fields = exact(record, ['type', 'authority', 'consent']);
+            return { type: 'add_authority', authority: parseAuthority(fields.authority), consent: parseSignature(fields.consent) };
+        }
+        default: return fail();
+    }
+}
+function parseGenesis(value) {
+    const record = exact(value, ['type', 'version', 'rpId', 'origins', 'handle', 'createdAt', 'authority']);
+    if (record.type !== 'ftown_account_genesis' || record.version !== 2)
+        return fail();
+    const origins = each(record.origins, MAX_ORIGINS, origin);
+    if (!origins.length || origins.some((item, index) => origins.indexOf(item) !== index))
+        return fail();
+    return {
+        type: 'ftown_account_genesis', version: 2, rpId: relyingParty(record.rpId), origins,
+        handle: fingerprint(record.handle), createdAt: time(record.createdAt), authority: parseAuthority(record.authority),
+    };
+}
+function parseTransition(value) {
+    const record = exact(value, ['type', 'version', 'accountId', 'revision', 'previousHead', 'issuedAt', 'credentialId', 'operation']);
+    if (record.type !== 'ftown_account_transition' || record.version !== 2)
+        return fail();
+    return {
+        type: 'ftown_account_transition', version: 2, accountId: fingerprint(record.accountId), revision: count(record.revision, 1),
+        previousHead: fingerprint(record.previousHead), issuedAt: time(record.issuedAt), credentialId: credential(record.credentialId),
+        operation: parseOperation(record.operation),
+    };
+}
+function parseSigned(value, parse) {
+    const record = exact(value, ['payload', 'signature']);
+    return { payload: parse(record.payload), signature: parseSignature(record.signature) };
+}
+function parseCheckpoint(value) {
+    const record = exact(value, ['version', 'accountId', 'revision', 'head', 'authorities', 'devices', 'bridges', 'revokedDeviceIds', 'revokedBridgeIds']);
+    if (record.version !== 2)
+        return fail();
+    const authorities = each(record.authorities, LEDGER_LIMITS.maxAuthorities, parseAuthority, 'ledger_limit');
+    if (!authorities.length)
+        return fail();
+    return {
+        version: 2, accountId: fingerprint(record.accountId), revision: count(record.revision, 0), head: fingerprint(record.head), authorities,
+        devices: each(record.devices, LEDGER_LIMITS.maxDevices, parseDevice, 'ledger_limit'),
+        bridges: each(record.bridges, LEDGER_LIMITS.maxBridges, parseBridge, 'ledger_limit'),
+        revokedDeviceIds: each(record.revokedDeviceIds, LEDGER_LIMITS.maxTransitions, fingerprint, 'ledger_limit'),
+        revokedBridgeIds: each(record.revokedBridgeIds, LEDGER_LIMITS.maxTransitions, token, 'ledger_limit'),
+    };
+}
+function canonical(value) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return JSON.stringify(value);
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? JSON.stringify(value) : fail();
+    if (Array.isArray(value)) {
+        const items = value;
+        return `[${items.map(canonical).join(',')}]`;
+    }
+    const record = object(value);
+    return `{${Object.keys(record).sort().map(key => `${JSON.stringify(key)}:${canonical(record[key])}`).join(',')}}`;
+}
+async function sha256(data) {
+    return new Uint8Array(await crypto.subtle.digest('SHA-256', data));
+}
+async function importable(raw, name) {
+    try {
+        await crypto.subtle.importKey('raw', decode(raw, 65, 65), { name, namedCurve: 'P-256' }, false, name === 'ECDSA' ? ['verify'] : []);
+    }
+    catch {
+        fail();
+    }
+}
+/** The asynchronous checks of new key material: endpoint id = SHA-256(point), every point on P-256. */
+async function keyMaterial(operation) {
+    if (operation.type === 'add_authority')
+        return importable(operation.authority.publicKey, 'ECDSA');
+    if (operation.type !== 'add_device' && operation.type !== 'add_bridge')
+        return;
+    const member = operation.type === 'add_device' ? operation.device : operation.bridge;
+    if (b64url(await sha256(decode(member.endpoint.publicKey, 65, 65))) !== member.endpoint.id)
+        fail();
+    await importable(member.endpoint.publicKey, 'ECDH');
+    await importable(member.authPublicKey, 'ECDSA');
+}
+function signerOf(state, credentialId) {
+    for (const item of state.authorities)
+        if (item.credentialId === credentialId)
+            return item;
+    return fail();
+}
+/** Shared rules of add_device and add_bridge; keys are never shared between roster members or between a member's two keys. */
+function admit(state, endpoint, authPublicKey, approvedAt, issuedAt) {
+    if (endpoint.ownerId !== state.accountId)
+        fail('ledger_other_account');
+    if (approvedAt > issuedAt)
+        fail();
+    if (state.revokedDeviceIds.indexOf(endpoint.id) !== -1)
+        fail('ledger_revoked');
+    const members = [...state.devices, ...state.bridges];
+    const keys = [endpoint.publicKey, authPublicKey];
+    if (members.some(item => item.endpoint.id === endpoint.id
+        || keys.indexOf(item.endpoint.publicKey) !== -1 || keys.indexOf(item.authPublicKey) !== -1))
+        fail();
+}
+function apply(current, operation, issuedAt) {
+    const next = {
+        ...current, authorities: current.authorities.slice(), devices: current.devices.slice(), bridges: current.bridges.slice(),
+        revokedDeviceIds: current.revokedDeviceIds.slice(), revokedBridgeIds: current.revokedBridgeIds.slice(),
+    };
+    switch (operation.type) {
+        case 'add_device': {
+            const added = operation.device;
+            admit(next, added.endpoint, added.authPublicKey, added.approvedAt, issuedAt);
+            if (next.devices.length >= LEDGER_LIMITS.maxDevices)
+                fail('ledger_limit');
+            next.devices.push(added);
+            break;
+        }
+        case 'add_bridge': {
+            const added = operation.bridge;
+            admit(next, added.endpoint, added.authPublicKey, added.approvedAt, issuedAt);
+            if (next.revokedBridgeIds.indexOf(added.bridgeId) !== -1)
+                fail('ledger_revoked');
+            if (next.bridges.some(item => item.bridgeId === added.bridgeId))
+                fail();
+            if (next.bridges.length >= LEDGER_LIMITS.maxBridges)
+                fail('ledger_limit');
+            next.bridges.push(added);
+            break;
+        }
+        case 'revoke_device': {
+            const index = next.devices.findIndex(item => item.endpoint.id === operation.endpointId);
+            if (index === -1)
+                fail(next.revokedDeviceIds.indexOf(operation.endpointId) !== -1 ? 'ledger_revoked' : 'invalid_ledger');
+            next.devices.splice(index, 1);
+            next.revokedDeviceIds.push(operation.endpointId);
+            break;
+        }
+        case 'revoke_bridge': {
+            const index = next.bridges.findIndex(item => item.bridgeId === operation.bridgeId);
+            if (index === -1)
+                fail(next.revokedBridgeIds.indexOf(operation.bridgeId) !== -1 ? 'ledger_revoked' : 'invalid_ledger');
+            next.bridges.splice(index, 1);
+            next.revokedBridgeIds.push(operation.bridgeId);
+            break;
+        }
+        case 'add_authority': {
+            const added = operation.authority;
+            if (added.addedAt > issuedAt)
+                fail();
+            if (next.authorities.some(item => item.credentialId === added.credentialId || item.publicKey === added.publicKey))
+                fail();
+            if (next.authorities.length >= LEDGER_LIMITS.maxAuthorities)
+                fail('ledger_limit');
+            next.authorities.push(added);
+            break;
+        }
+        default: return fail();
+    }
+    return next;
+}
+function copyOf(state) {
+    return {
+        version: 2, accountId: state.accountId, revision: state.revision, head: state.head,
+        authorities: state.authorities.slice(), devices: state.devices.slice(), bridges: state.bridges.slice(),
+        revokedDeviceIds: state.revokedDeviceIds.slice(), revokedBridgeIds: state.revokedBridgeIds.slice(),
+    };
+}
+/** The added passkey's own assertion that it joins THIS account; every path that applies add_authority goes through extend and here. */
+async function consented(operation, accountId, root) {
+    const challenge = await authorityConsentChallenge(accountId, operation.authority);
+    if (!await verifyPasskeyAssertion({ rpId: root.rpId, origins: root.origins, publicKey: operation.authority.publicKey, challenge, signature: operation.consent }))
+        fail();
+}
+/** Verifies `records` in order on top of a verified `state` whose last record was issued at `previousTime`. */
+async function extend(state, root, previousTime, records, at) {
+    let current = state;
+    let lastTime = previousTime;
+    for (const record of records) {
+        const payload = record.payload;
+        if (payload.accountId !== current.accountId)
+            fail('ledger_other_account');
+        if (payload.revision !== current.revision + 1)
+            fail();
+        if (payload.previousHead !== current.head)
+            fail();
+        if (payload.issuedAt < lastTime || payload.issuedAt > at + LEDGER_LIMITS.maxFutureSkewMs)
+            fail();
+        const signer = signerOf(current, payload.credentialId);
+        const challenge = await ledgerChallenge(payload);
+        if (!await verifyPasskeyAssertion({ rpId: root.rpId, origins: root.origins, publicKey: signer.publicKey, challenge, signature: record.signature }))
+            fail();
+        await keyMaterial(payload.operation);
+        if (payload.operation.type === 'add_authority')
+            await consented(payload.operation, current.accountId, root);
+        current = { ...apply(current, payload.operation, payload.issuedAt), revision: payload.revision, head: b64url(challenge) };
+        lastTime = payload.issuedAt;
+    }
+    return current;
+}
+async function verifyAll(ledger, at) {
+    const root = ledger.genesis.payload;
+    if (root.createdAt > at + LEDGER_LIMITS.maxFutureSkewMs || root.authority.addedAt > root.createdAt)
+        fail();
+    await importable(root.authority.publicKey, 'ECDSA');
+    const challenge = await ledgerChallenge(root);
+    if (!await verifyPasskeyAssertion({ rpId: root.rpId, origins: root.origins, publicKey: root.authority.publicKey, challenge, signature: ledger.genesis.signature }))
+        fail();
+    const accountId = b64url(challenge);
+    const initial = {
+        version: 2, accountId, revision: 0, head: accountId, authorities: [root.authority], devices: [], bridges: [], revokedDeviceIds: [], revokedBridgeIds: [],
+    };
+    return extend(initial, root, root.createdAt, ledger.transitions, at);
+}
+/** Unexpected (non-ledger) failures become invalid_ledger. */
+async function guarded(run) {
+    try {
+        return await run();
+    }
+    catch (error) {
+        if (error instanceof LedgerError)
+            throw error;
+        return fail();
+    }
+}
+async function indexed(value) {
+    const ledger = parseLedger(value);
+    const accountId = await ledgerHead(ledger.genesis.payload);
+    const heads = [];
+    for (const record of ledger.transitions)
+        heads.push(await ledgerHead(record.payload));
+    return { ledger, accountId, heads, head: heads.length ? heads[heads.length - 1] : accountId };
+}
+/** The cache vouches for `chain` only if it names the chain's last head and the chain is hash-linked up to it. */
+function vouched(chain, cache) {
+    if (cache === undefined)
+        return null;
+    try {
+        const record = object(cache);
+        const checkpoint = parseCheckpoint(record.checkpoint);
+        if (record.head !== chain.head || checkpoint.head !== chain.head || checkpoint.accountId !== chain.accountId
+            || checkpoint.revision !== chain.heads.length)
+            return null;
+        for (let index = 0; index < chain.heads.length; index += 1) {
+            const payload = chain.ledger.transitions[index].payload;
+            if (payload.revision !== index + 1 || payload.previousHead !== (index === 0 ? chain.accountId : chain.heads[index - 1]))
+                return null;
+        }
+        return checkpoint;
+    }
+    catch {
+        return null;
+    }
+}
+function sameSignature(left, right) {
+    return left.authenticatorData === right.authenticatorData && left.clientDataJSON === right.clientDataJSON && left.signature === right.signature;
+}
+/** True iff the genesis and the first `length` records carry byte-identical signatures, so the candidate's prefix is the verified local one. */
+function sameRecords(local, candidate, length) {
+    if (!sameSignature(local.genesis.signature, candidate.genesis.signature))
+        return false;
+    for (let index = 0; index < length; index += 1) {
+        if (!sameSignature(local.transitions[index].signature, candidate.transitions[index].signature))
+            return false;
+    }
+    return true;
+}
+function revocationCount(ledger) {
+    let total = 0;
+    for (const record of ledger.transitions) {
+        const type = record.payload.operation.type;
+        if (type === 'revoke_device' || type === 'revoke_bridge')
+            total += 1;
+    }
+    return total;
+}
+/** The fork order, strict and total on distinct chains of one account: longer, then more revocations in the whole chain, then the smaller head. */
+function outranks(candidate, local) {
+    if (candidate.heads.length !== local.heads.length)
+        return candidate.heads.length > local.heads.length;
+    const revocations = revocationCount(candidate.ledger) - revocationCount(local.ledger);
+    if (revocations !== 0)
+        return revocations > 0;
+    return candidate.head < local.head;
+}
+function choice(decision, checkpoint, discarded) {
+    return { decision, checkpoint: copyOf(checkpoint), discarded };
+}
+/** SHA-256(UTF-8(LEDGER_DOMAIN + canonical(payload))): the WebAuthn challenge, and the record's head. */
+export async function ledgerChallenge(payload) {
+    return sha256(encoder.encode(LEDGER_DOMAIN + canonical(payload)));
+}
+export async function ledgerHead(payload) {
+    return b64url(await ledgerChallenge(payload));
+}
+export function accountIdOf(genesis) {
+    return ledgerHead(genesis);
+}
+/** SHA-256(UTF-8(SIGNIN_DOMAIN + nonce)): the only sign-in challenge. The domain differs from LEDGER_DOMAIN, so a sign-in assertion
+ *  can never double as a ledger record signature. The nonce is a base64url token (22-128 chars); anything else throws invalid_ledger. */
+export async function signInChallenge(nonce) {
+    if (typeof nonce !== 'string' || !/^[A-Za-z0-9_-]{22,128}$/.test(nonce))
+        fail();
+    return sha256(encoder.encode(SIGNIN_DOMAIN + nonce));
+}
+/** SHA-256(UTF-8(AUTHORITY_CONSENT_DOMAIN + canonical({accountId, credentialId, publicKey}))): what a passkey signs to consent to
+ *  becoming an authority of exactly that account. Throws invalid_ledger on a malformed accountId, credentialId or key. */
+export async function authorityConsentChallenge(accountId, authority) {
+    const bound = { accountId: fingerprint(accountId), credentialId: credential(authority.credentialId), publicKey: point(authority.publicKey) };
+    return sha256(encoder.encode(AUTHORITY_CONSENT_DOMAIN + canonical(bound)));
+}
+/** The issuedAt of the last transition, or the genesis createdAt: the `lastIssuedAt` argument of nextTransition. */
+export function ledgerLastIssuedAt(ledger) {
+    const last = ledger.transitions[ledger.transitions.length - 1];
+    return time(last === undefined ? ledger.genesis.payload.createdAt : last.payload.issuedAt);
+}
+/** Every device endpoint id and bridgeId revoked anywhere in the chain, in chain order. Only for chains that verified (or that
+ *  chooseLedger did not reject): replicas keep the union over all of them and never trust those ids again. Throws on a malformed shape. */
+export function ledgerRevocations(ledger) {
+    const deviceIds = [];
+    const bridgeIds = [];
+    for (const record of parseLedger(ledger).transitions) {
+        const operation = record.payload.operation;
+        if (operation.type === 'revoke_device' && deviceIds.indexOf(operation.endpointId) === -1)
+            deviceIds.push(operation.endpointId);
+        if (operation.type === 'revoke_bridge' && bridgeIds.indexOf(operation.bridgeId) === -1)
+            bridgeIds.push(operation.bridgeId);
+    }
+    return { deviceIds, bridgeIds };
+}
+/** Pure: `checkpoint` with every sticky id removed from devices/bridges and added, de-duplicated, to the revoked lists. Inputs are never
+ *  mutated. Every trust decision uses this output. NEVER pass it as the chooseLedger cache: it no longer describes the chain itself. */
+export function applyRevocations(checkpoint, sticky) {
+    const current = parseCheckpoint(checkpoint);
+    const record = exact(sticky, ['deviceIds', 'bridgeIds']);
+    const deviceIds = new Set(each(record.deviceIds, MAX_STICKY_IDS, fingerprint, 'ledger_limit'));
+    const bridgeIds = new Set(each(record.bridgeIds, MAX_STICKY_IDS, token, 'ledger_limit'));
+    const revokedDeviceIds = current.revokedDeviceIds.slice();
+    deviceIds.forEach(id => { if (revokedDeviceIds.indexOf(id) === -1)
+        revokedDeviceIds.push(id); });
+    const revokedBridgeIds = current.revokedBridgeIds.slice();
+    bridgeIds.forEach(id => { if (revokedBridgeIds.indexOf(id) === -1)
+        revokedBridgeIds.push(id); });
+    return {
+        ...current, devices: current.devices.filter(item => !deviceIds.has(item.endpoint.id)), bridges: current.bridges.filter(item => !bridgeIds.has(item.bridgeId)),
+        revokedDeviceIds, revokedBridgeIds,
+    };
+}
+/** Strict shape: exact keys, canonical base64url, key lengths, canonical origins, labels and limits.
+ *  Returns a rebuilt copy that shares nothing with the input. Throws invalid_ledger, or ledger_limit for size and count. */
+export function parseLedger(value) {
+    const record = exact(value, ['genesis', 'transitions']);
+    const ledger = {
+        genesis: parseSigned(record.genesis, parseGenesis),
+        transitions: each(record.transitions, LEDGER_LIMITS.maxTransitions, item => parseSigned(item, parseTransition), 'ledger_limit'),
+    };
+    if (encoder.encode(JSON.stringify(ledger)).byteLength > LEDGER_LIMITS.maxBytes)
+        return fail('ledger_limit');
+    return ledger;
+}
+/** Verifies ONE chain from genesis and returns its last checkpoint. Every record's passkey signature is checked against an authority of the
+ *  PREVIOUS state (genesis: its own authority) with genesis.rpId/origins. Throws LedgerError: invalid_ledger, or a more specific code. */
+export async function verifyLedger(ledger, now = Date.now()) {
+    const at = time(now);
+    return copyOf(await guarded(() => verifyAll(parseLedger(ledger), at)));
+}
+/** Fork choice, a pure total order on valid chains of one account: longer wins, then more revoke_device/revoke_bridge records in the
+ *  whole chain, then the lexicographically smaller head.
+ *  - different genesis or invalid candidate -> 'reject'; equal chain or a prefix of local -> 'keep' (decided from record heads alone)
+ *  - otherwise the order decides; when a fork wins, `discarded` lists the local records after the common prefix.
+ *  `cache` is the checkpoint of the already-verified local chain; when it vouches for `local`, local signatures and timestamps are not
+ *  re-checked, and an extension only has its new records verified. Throws only when `local` is invalid (and not vouched for), or when
+ *  `local` is null and the candidate is invalid. */
+export async function chooseLedger(local, candidate, now = Date.now(), cache) {
+    const at = time(now);
+    if (local === null)
+        return choice('adopt', await guarded(() => verifyAll(parseLedger(candidate), at)), []);
+    const mine = await guarded(() => indexed(local));
+    const base = vouched(mine, cache) ?? await guarded(() => verifyAll(mine.ledger, at));
+    let theirs;
+    try {
+        theirs = await indexed(candidate);
+    }
+    catch {
+        return choice('reject', base, []);
+    }
+    if (theirs.accountId !== mine.accountId)
+        return choice('reject', base, []);
+    const localLength = mine.heads.length;
+    const candidateLength = theirs.heads.length;
+    let common = 0;
+    while (common < localLength && common < candidateLength && mine.heads[common] === theirs.heads[common])
+        common += 1;
+    if (common === candidateLength)
+        return choice('keep', base, []);
+    if (common === localLength && sameRecords(mine.ledger, theirs.ledger, localLength)) {
+        try {
+            const fresh = theirs.ledger.transitions.slice(localLength);
+            return choice('adopt', await extend(base, mine.ledger.genesis.payload, ledgerLastIssuedAt(mine.ledger), fresh, at), []);
+        }
+        catch {
+            return choice('reject', base, []);
+        }
+    }
+    let winner;
+    try {
+        winner = await verifyAll(theirs.ledger, at);
+    }
+    catch {
+        return choice('reject', base, []);
+    }
+    return outranks(theirs, mine) ? choice('adopt', winner, mine.ledger.transitions.slice(common)) : choice('keep', base, []);
+}
+/** Pure next-payload builder for the signer. Applies the operation to a copy of the checkpoint with the verifier's rules and throws the
+ *  same errors. Not checked here (they need async crypto): endpoint id = SHA-256(point), points on the curve, and the add_authority
+ *  consent signature (only its shape is checked); verifyLedger enforces all three.
+ *  `lastIssuedAt` is the issuedAt of the ledger's last record (see ledgerLastIssuedAt); the result's issuedAt is max(now, lastIssuedAt). */
+export function nextTransition(checkpoint, credentialId, operation, now = Date.now(), lastIssuedAt) {
+    const current = parseCheckpoint(checkpoint);
+    const signer = signerOf(current, credential(credentialId));
+    if (current.revision >= LEDGER_LIMITS.maxTransitions)
+        fail('ledger_limit');
+    const at = time(now);
+    const issuedAt = lastIssuedAt === undefined ? at : Math.max(at, time(lastIssuedAt));
+    if (issuedAt > at + LEDGER_LIMITS.maxFutureSkewMs)
+        fail();
+    const parsed = parseOperation(operation);
+    apply(current, parsed, issuedAt);
+    return {
+        type: 'ftown_account_transition', version: 2, accountId: current.accountId, revision: current.revision + 1,
+        previousHead: current.head, issuedAt, credentialId: signer.credentialId, operation: parsed,
+    };
+}
+//# sourceMappingURL=ledger.js.map

package/dist/security/ledger/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../src/security/ledger/ledger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAKtG,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAQvD,MAAM,QAAQ,GAAmD;IAC/D,cAAc,EAAE,uCAAuC;IACvD,oBAAoB,EAAE,sDAAsD;IAC5E,cAAc,EAAE,+CAA+C;IAC/D,YAAY,EAAE,gDAAgD;CAC/D,CAAC;AAEF,oFAAoF;AACpF,MAAM,OAAO,WAAY,SAAQ,KAAK;IACf;IAArB,YAAqB,IAAqB;QACxC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QADH,SAAI,GAAJ,IAAI,CAAiB;QAExC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,QAAQ,GAAG,eAAe,CAAC;AACjC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAC1C,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,cAAc,GAAG,CAAC,GAAG,aAAa,CAAC,cAAc,CAAC;AAKxD,SAAS,IAAI,CAAC,OAAwB,gBAAgB;IACpD,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AACD,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,2FAA2F;IAC3F,OAAO,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;AACzE,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,IAAuB;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC3F,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,IAAI,CAAI,KAAc,EAAE,GAAW,EAAE,KAA2B,EAAE,OAAwB,gBAAgB;IACjH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACzC,MAAM,KAAK,GAAuB,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,GAAW;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3E,CAAC;AACD,SAAS,MAAM,CAAC,IAAgB;IAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AACD,sFAAsF;AACtF,SAAS,MAAM,CAAC,KAAc,EAAE,GAAW,EAAE,GAAW;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAClD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;IAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,EAAE,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9E,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC;AACjG,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AACD,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AACD,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IACzD,+HAA+H;IAC/H,OAAO,yFAAyF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9H,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtH,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5I,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,6EAA6E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClH,CAAC;AACD,8FAA8F;AAC9F,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC9C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;IAAC,CAAC;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,EAAE,CAAC;IACvC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjH,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IAClF,OAAO;QACL,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC7F,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC/E,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AACD,SAAS,aAAa,CAAC,KAAc,EAAE,IAA0B;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,EAAE,CAAC;IAChE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AACpI,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/E,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AAC1J,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACpL,OAAO,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9E,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG;QACb,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpF,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;KAC5G,CAAC;IACF,OAAO,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9E,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAChH,KAAK,eAAe,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAClI,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAChH,KAAK,eAAe,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtH,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzH,CAAC;QACD,OAAO,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAuB,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACrG,OAAO;QACL,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO;QACnF,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;KACnH,CAAC;AACJ,CAAC;AACD,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;IACnI,IAAI,MAAM,CAAC,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACtF,OAAO;QACL,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9H,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;KAC5C,CAAC;AACJ,CAAC;AACD,SAAS,WAAW,CAAI,KAAc,EAAE,KAA4B;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AACzF,CAAC;AACD,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACvJ,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IAC3G,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW;QACtI,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC;QACpF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC;QACpF,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC;QAC1G,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC;KACrG,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAuB,KAAK,CAAC;QACxC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACpH,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,IAA6B;IACjD,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAsB;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC;IAAC,CAAC;AACrB,CAAC;AACD,uGAAuG;AACvG,KAAK,UAAU,WAAW,CAAC,SAA0B;IACnD,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClG,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC;IACnG,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAuB,EAAE,YAAoB;IAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW;QAAE,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC;AACD,8HAA8H;AAC9H,SAAS,KAAK,CAAC,KAAuB,EAAE,QAAwB,EAAE,aAAqB,EAAE,UAAkB,EAAE,QAAgB;IAC3H,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACvE,IAAI,UAAU,GAAG,QAAQ;QAAE,IAAI,EAAE,CAAC;IAClC,IAAI,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAA0D,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;WACpD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,IAAI,EAAE,CAAC;AACxG,CAAC;AACD,SAAS,KAAK,CAAC,OAAyB,EAAE,SAA0B,EAAE,QAAgB;IACpF,MAAM,IAAI,GAAqB;QAC7B,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE;QACxH,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE;KACvG,CAAC;IACF,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;YAC/B,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU;gBAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM;QACR,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;YAC/B,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACjF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;gBAAE,IAAI,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU;gBAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM;QACR,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,SAAS,CAAC,UAAU,CAAC,CAAC;YACxF,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACzH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM;QACR,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAC;YACnF,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACvH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC;YAClC,IAAI,KAAK,CAAC,OAAO,GAAG,QAAQ;gBAAE,IAAI,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;gBAAE,IAAI,EAAE,CAAC;YAC1H,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,aAAa,CAAC,cAAc;gBAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAClF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,OAAO,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,MAAM,CAAC,KAAuB;IACrC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;QAClF,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE;QACtG,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE;KACnG,CAAC;AACJ,CAAC;AAED,wIAAwI;AACxI,KAAK,UAAU,SAAS,CAAC,SAA8D,EAAE,SAAiB,EAAE,IAAmB;IAC7H,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAAE,IAAI,EAAE,CAAC;AAC3K,CAAC;AACD,+GAA+G;AAC/G,KAAK,UAAU,MAAM,CAAC,KAAuB,EAAE,IAAmB,EAAE,YAAoB,EAAE,OAAmC,EAAE,EAAU;IACvI,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,YAAY,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC;YAAE,IAAI,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,IAAI;YAAE,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,QAAQ,GAAG,QAAQ,IAAI,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,aAAa,CAAC,eAAe;YAAE,IAAI,EAAE,CAAC;QACjG,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAAE,IAAI,EAAE,CAAC;QAC3J,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,eAAe;YAAE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5G,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1H,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,EAAU;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IACpC,IAAI,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,aAAa,CAAC,eAAe,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS;QAAE,IAAI,EAAE,CAAC;IAC3G,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAAE,IAAI,EAAE,CAAC;IAC3K,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,OAAO,GAAqB;QAChC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE;KACzJ,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AACD,8DAA8D;AAC9D,KAAK,UAAU,OAAO,CAAI,GAAqB;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AACD,KAAK,UAAU,OAAO,CAAC,KAAc;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAChG,CAAC;AACD,kHAAkH;AAClH,SAAS,OAAO,CAAC,KAAc,EAAE,KAA8B;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;eACvG,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC7D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvI,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AACD,SAAS,aAAa,CAAC,IAAsB,EAAE,KAAuB;IACpE,OAAO,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;AAClJ,CAAC;AACD,gJAAgJ;AAChJ,SAAS,WAAW,CAAC,KAAa,EAAE,SAAiB,EAAE,MAAc;IACnE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3C,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,eAAe;YAAE,KAAK,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,mJAAmJ;AACnJ,SAAS,QAAQ,CAAC,SAAkB,EAAE,KAAc;IAClD,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;IACtG,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtF,IAAI,WAAW,KAAK,CAAC;QAAE,OAAO,WAAW,GAAG,CAAC,CAAC;IAC9C,OAAO,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;AACrC,CAAC;AACD,SAAS,MAAM,CAAC,QAAkC,EAAE,UAA4B,EAAE,SAAqC;IACrH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;AACjE,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAyC;IAC7E,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAyC;IACxE,OAAO,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,OAAsB;IAChD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AACD;yIACyI;AACzI,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAC;IAChF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AACD;0HAC0H;AAC1H,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAiB,EAAE,SAA8D;IAC/H,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;IAC7I,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AACD,oHAAoH;AACpH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC7F,CAAC;AACD;2IAC2I;AAC3I,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC3C,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/H,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AACD;wIACwI;AACxI,MAAM,UAAU,gBAAgB,CAAC,UAA4B,EAAE,MAAoD;IACjH,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;IACzF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC1D,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC1D,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO;QACL,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7J,gBAAgB,EAAE,gBAAgB;KACnC,CAAC;AACJ,CAAC;AAED;4HAC4H;AAC5H,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAW;QACrB,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC;QAClD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,cAAc,CAAC;KAChI,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,aAAa,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;0IAC0I;AAC1I,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACzE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;oDAMoD;AACpD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAoB,EAAE,SAAiB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,KAAmB;IACvH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IACtC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,WAAW,IAAI,MAAM,GAAG,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,CAAC,CAAC;IACpH,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC,OAAO,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1H,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,IAAI,MAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAC5H,CAAC;AAED;;;4IAG4I;AAC5I,MAAM,UAAU,cAAc,CAC5B,UAA4B,EAAE,YAAoB,EAAE,SAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,YAAqB;IAE/H,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,cAAc;QAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACpF,IAAI,QAAQ,GAAG,EAAE,GAAG,aAAa,CAAC,eAAe;QAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO;QACL,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;QAC1G,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM;KAC3F,CAAC;AACJ,CAAC"}