libre-webui 0.16.1 → 0.18.0

package/backend/dist/services/workPreviewProxyService.js

@@ -0,0 +1,514 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import crypto from 'node:crypto';
+import http from 'node:http';
+import { getDatabase } from '../db.js';
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('services:work-preview-proxy');
+export const WORK_PREVIEW_PROXY_PREFIX = '/api/work/previews';
+const MAX_REWRITABLE_RESPONSE_BYTES = 8 * 1024 * 1024;
+const TASK_ID_PATTERN = /^[A-Za-z0-9-]{1,100}$/;
+const NONCE_PATTERN = /^[A-Za-z0-9_-]{22}$/;
+const SIGNATURE_PATTERN = /^[A-Za-z0-9_-]{43}$/;
+// Derive a domain-separated capability secret from JWT_SECRET when it exists.
+// An unset JWT secret already makes sessions process-local; the random fallback
+// gives preview capabilities the same restart semantics without importing the
+// auth service (whose model singleton opens the database during module load).
+const WORK_PREVIEW_SECRET = crypto
+    .createHash('sha256')
+    .update(`libre-work-preview:${process.env.JWT_SECRET || crypto.randomBytes(64).toString('hex')}`)
+    .digest('hex');
+const HOP_BY_HOP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+const PRIVATE_REQUEST_HEADERS = new Set([
+    'authorization',
+    'cookie',
+    'host',
+    'origin',
+    'referer',
+]);
+const PRIVATE_RESPONSE_HEADERS = new Set([
+    'alt-svc',
+    'authentication-info',
+    'clear-site-data',
+    'content-security-policy',
+    'content-security-policy-report-only',
+    'cross-origin-embedder-policy',
+    'cross-origin-opener-policy',
+    'cross-origin-resource-policy',
+    'document-policy',
+    'feature-policy',
+    'nel',
+    'origin-agent-cluster',
+    'permissions-policy',
+    'reporting-endpoints',
+    'report-to',
+    'set-cookie',
+    'strict-transport-security',
+    'www-authenticate',
+    'x-frame-options',
+    'x-permitted-cross-domain-policies',
+]);
+const SAFE_WEBSOCKET_RESPONSE_HEADERS = new Set([
+    'connection',
+    'sec-websocket-accept',
+    'sec-websocket-extensions',
+    'sec-websocket-protocol',
+    'upgrade',
+]);
+const previewFrameAncestors = () => {
+    const ancestors = new Set(["'self'"]);
+    if (process.env.NODE_ENV !== 'production') {
+        ancestors.add('http://localhost:*');
+        ancestors.add('http://127.0.0.1:*');
+        ancestors.add('http://[::1]:*');
+    }
+    for (const candidate of (process.env.CORS_ORIGIN || '').split(',')) {
+        try {
+            const origin = new URL(candidate.trim());
+            if (origin.protocol === 'http:' || origin.protocol === 'https:') {
+                ancestors.add(origin.origin);
+            }
+        }
+        catch {
+            // Ignore wildcard and malformed CORS entries in a CSP source list.
+        }
+    }
+    return [...ancestors].join(' ');
+};
+const defaultPreviewLookup = taskId => getDatabase()
+    .prepare(`SELECT preview_status, preview_url
+       FROM work_tasks
+       WHERE id = ?`)
+    .get(taskId);
+const previewUpstreamHost = () => {
+    const configured = (process.env.WORK_PREVIEW_BIND || '127.0.0.1').trim();
+    if (!configured || configured === '0.0.0.0')
+        return '127.0.0.1';
+    if (configured === '::' || configured === '[::]')
+        return '::1';
+    return configured.replace(/^\[|\]$/g, '');
+};
+const secureEqual = (left, right) => {
+    const leftBuffer = Buffer.from(left);
+    const rightBuffer = Buffer.from(right);
+    return (leftBuffer.length === rightBuffer.length &&
+        crypto.timingSafeEqual(leftBuffer, rightBuffer));
+};
+const escapeHtmlAttribute = (value) => value
+    .replace(/&/g, '&')
+    .replace(/"/g, '"')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;');
+const formatHostForUrl = (host) => host.includes(':') && !host.startsWith('[') ? `[${host}]` : host;
+const proxyBootstrap = (proxyBasePath) => {
+    const serializedBase = JSON.stringify(proxyBasePath);
+    return `<base href="${escapeHtmlAttribute(proxyBasePath)}" />
+<script>(() => {
+  const proxyBase = ${serializedBase};
+  const rewrite = value => {
+    if (value == null) return value;
+    try {
+      const url = new URL(String(value), document.baseURI);
+      const proxyProtocol = url.protocol === 'http:' || url.protocol === 'https:' || url.protocol === 'ws:' || url.protocol === 'wss:';
+      if (proxyProtocol && url.host === location.host && !url.pathname.startsWith(proxyBase)) {
+        url.pathname = proxyBase + url.pathname.replace(/^\\/+/, '');
+        return url.toString();
+      }
+    } catch {}
+    return value;
+  };
+
+  const nativeFetch = window.fetch.bind(window);
+  window.fetch = (input, init) => {
+    if (typeof input === 'string' || input instanceof URL) return nativeFetch(rewrite(input), init);
+    if (input instanceof Request) return nativeFetch(new Request(rewrite(input.url), input), init);
+    return nativeFetch(input, init);
+  };
+
+  const nativeOpen = XMLHttpRequest.prototype.open;
+  XMLHttpRequest.prototype.open = function(method, url, ...rest) {
+    return nativeOpen.call(this, method, rewrite(url), ...rest);
+  };
+
+  const NativeWebSocket = window.WebSocket;
+  function PreviewWebSocket(url, protocols) {
+    return protocols === undefined
+      ? new NativeWebSocket(rewrite(url))
+      : new NativeWebSocket(rewrite(url), protocols);
+  }
+  PreviewWebSocket.prototype = NativeWebSocket.prototype;
+  PreviewWebSocket.CONNECTING = NativeWebSocket.CONNECTING;
+  PreviewWebSocket.OPEN = NativeWebSocket.OPEN;
+  PreviewWebSocket.CLOSING = NativeWebSocket.CLOSING;
+  PreviewWebSocket.CLOSED = NativeWebSocket.CLOSED;
+  window.WebSocket = PreviewWebSocket;
+
+  if (window.EventSource) {
+    const NativeEventSource = window.EventSource;
+    function PreviewEventSource(url, options) {
+      return new NativeEventSource(rewrite(url), options);
+    }
+    PreviewEventSource.prototype = NativeEventSource.prototype;
+    window.EventSource = PreviewEventSource;
+  }
+
+  const nativeSetAttribute = Element.prototype.setAttribute;
+  Element.prototype.setAttribute = function(name, value) {
+    if (/^srcset$/i.test(name)) {
+      const sourceSet = String(value).split(',').map(candidate => {
+        const [url, ...descriptor] = candidate.trim().split(/\\s+/);
+        return [rewrite(url), ...descriptor].join(' ');
+      }).join(', ');
+      return nativeSetAttribute.call(this, name, sourceSet);
+    }
+    const urlAttribute = /^(?:src|href|action|formaction|poster|data)$/i.test(name);
+    return nativeSetAttribute.call(this, name, urlAttribute ? rewrite(value) : value);
+  };
+
+  for (const method of ['pushState', 'replaceState']) {
+    const nativeHistoryMethod = history[method].bind(history);
+    history[method] = (state, unused, url) => nativeHistoryMethod(state, unused, rewrite(url));
+  }
+})();</script>`;
+};
+const rewriteQuotedRootPaths = (content, proxyBasePath) => content.replace(/(["'`])\/(?!\/)(?=[@A-Za-z0-9._~-])/g, `$1${proxyBasePath}`);
+export const rewritePreviewText = (content, contentType, proxyBasePath) => {
+    const normalizedType = contentType.toLowerCase();
+    if (normalizedType.includes('text/html') ||
+        normalizedType.includes('application/xhtml+xml')) {
+        let rewritten = content.replace(/(\b(?:src|href|action|formaction|poster|data)\s*=\s*["'])\/(?!\/)/gi, `$1${proxyBasePath}`);
+        rewritten = rewritten.replace(/(\bsrcset\s*=\s*["'])([^"']*)(["'])/gi, (_match, open, sourceSet, close) => `${open}${sourceSet.replace(/(^|,\s*)\/(?!\/)/g, `$1${proxyBasePath}`)}${close}`);
+        rewritten = rewritten.replace(/(<script\b[^>]*>)([\s\S]*?)(<\/script\b[^>]*>)/gi, (_match, open, script, close) => `${open}${rewriteQuotedRootPaths(script, proxyBasePath)}${close}`);
+        rewritten = rewritten.replace(/(<style\b[^>]*>)([\s\S]*?)(<\/style\b[^>]*>)/gi, (_match, open, style, close) => `${open}${rewritePreviewText(style, 'text/css', proxyBasePath)}${close}`);
+        const injection = proxyBootstrap(proxyBasePath);
+        return /<head\b[^>]*>/i.test(rewritten)
+            ? rewritten.replace(/<head\b[^>]*>/i, match => `${match}\n${injection}`)
+            : `${injection}\n${rewritten}`;
+    }
+    if (normalizedType.includes('text/css')) {
+        return content
+            .replace(/(url\(\s*["']?)\/(?!\/)/gi, `$1${proxyBasePath}`)
+            .replace(/(@import\s+["'])\/(?!\/)/gi, `$1${proxyBasePath}`);
+    }
+    if (normalizedType.includes('javascript') ||
+        normalizedType.includes('ecmascript') ||
+        normalizedType.includes('typescript')) {
+        return rewriteQuotedRootPaths(content, proxyBasePath);
+    }
+    if (normalizedType.includes('image/svg+xml')) {
+        return content.replace(/(\b(?:src|href)\s*=\s*["'])\/(?!\/)/gi, `$1${proxyBasePath}`);
+    }
+    return content;
+};
+const canRewriteContentType = (contentType) => {
+    const normalized = contentType.toLowerCase();
+    return (normalized.includes('text/html') ||
+        normalized.includes('application/xhtml+xml') ||
+        normalized.includes('text/css') ||
+        normalized.includes('javascript') ||
+        normalized.includes('ecmascript') ||
+        normalized.includes('typescript') ||
+        normalized.includes('image/svg+xml'));
+};
+export class WorkPreviewProxyService {
+    constructor(secret = WORK_PREVIEW_SECRET, lookupPreview = defaultPreviewLookup, upstreamHost = previewUpstreamHost()) {
+        this.secret = secret;
+        this.lookupPreview = lookupPreview;
+        this.upstreamHost = upstreamHost;
+        this.handleHttp = (request, response) => {
+            const target = this.parseTarget(request.originalUrl || request.url);
+            if (!target) {
+                response.status(404).type('text/plain').send('Preview not found.');
+                return;
+            }
+            if (request.method === 'OPTIONS' &&
+                request.headers['access-control-request-method']) {
+                response.status(204);
+                response.setHeader('Access-Control-Allow-Origin', '*');
+                response.setHeader('Access-Control-Allow-Methods', String(request.headers['access-control-request-method']));
+                const requestedHeaders = request.headers['access-control-request-headers'];
+                if (requestedHeaders) {
+                    response.setHeader('Access-Control-Allow-Headers', requestedHeaders);
+                }
+                response.setHeader('Access-Control-Max-Age', '600');
+                response.setHeader('Cache-Control', 'no-store');
+                response.end();
+                return;
+            }
+            const upstreamRequest = http.request({
+                hostname: this.upstreamHost,
+                port: target.port,
+                path: target.upstreamPath,
+                method: request.method,
+                headers: this.upstreamRequestHeaders(request.headers, target),
+            }, upstream => {
+                const contentType = String(upstream.headers['content-type'] || '');
+                const contentEncoding = String(upstream.headers['content-encoding'] || 'identity').toLowerCase();
+                const rewritten = request.method !== 'HEAD' &&
+                    contentEncoding === 'identity' &&
+                    canRewriteContentType(contentType);
+                if (!rewritten) {
+                    this.applyResponseHeaders(response, upstream, target, false);
+                    upstream.pipe(response);
+                    return;
+                }
+                const chunks = [];
+                let totalBytes = 0;
+                upstream.on('data', (chunk) => {
+                    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+                    totalBytes += buffer.length;
+                    if (totalBytes > MAX_REWRITABLE_RESPONSE_BYTES) {
+                        upstream.destroy(new Error('Work preview text response exceeded the proxy limit.'));
+                        return;
+                    }
+                    chunks.push(buffer);
+                });
+                upstream.on('end', () => {
+                    if (response.destroyed)
+                        return;
+                    this.applyResponseHeaders(response, upstream, target, true);
+                    const body = rewritePreviewText(Buffer.concat(chunks).toString('utf8'), contentType, target.proxyBasePath);
+                    response.send(body);
+                });
+                upstream.on('error', error => {
+                    logger.warn('Work preview upstream response failed:', error.message);
+                    if (!response.headersSent) {
+                        response
+                            .status(502)
+                            .type('text/plain')
+                            .send('Preview unavailable.');
+                    }
+                    else {
+                        response.destroy(error);
+                    }
+                });
+            });
+            upstreamRequest.on('error', error => {
+                logger.warn('Work preview proxy request failed:', error.message);
+                if (!response.headersSent) {
+                    response.status(502).type('text/plain').send('Preview unavailable.');
+                }
+                else {
+                    response.destroy(error);
+                }
+            });
+            request.on('aborted', () => upstreamRequest.destroy());
+            request.pipe(upstreamRequest);
+        };
+    }
+    signature(taskId, port, nonce) {
+        return crypto
+            .createHmac('sha256', this.secret)
+            .update(`${taskId}:${port}:${nonce}`)
+            .digest('base64url');
+    }
+    createPreviewUrl(taskId, port) {
+        if (!TASK_ID_PATTERN.test(taskId)) {
+            throw new Error('Work preview task ID is invalid.');
+        }
+        if (!Number.isInteger(port) || port < 1 || port > 65535) {
+            throw new Error('Work preview port is invalid.');
+        }
+        const nonce = crypto.randomBytes(16).toString('base64url');
+        const signature = this.signature(taskId, port, nonce);
+        return `${WORK_PREVIEW_PROXY_PREFIX}/${encodeURIComponent(taskId)}/${port}.${nonce}.${signature}/`;
+    }
+    parseTarget(rawUrl) {
+        let url;
+        try {
+            url = new URL(rawUrl, 'http://libre-preview.local');
+        }
+        catch {
+            return undefined;
+        }
+        if (!url.pathname.startsWith(`${WORK_PREVIEW_PROXY_PREFIX}/`)) {
+            return undefined;
+        }
+        const remainder = url.pathname.slice(WORK_PREVIEW_PROXY_PREFIX.length + 1);
+        const segments = remainder.split('/');
+        const encodedTaskId = segments.shift();
+        const credential = segments.shift();
+        if (!encodedTaskId || !credential)
+            return undefined;
+        let taskId;
+        try {
+            taskId = decodeURIComponent(encodedTaskId);
+        }
+        catch {
+            return undefined;
+        }
+        if (!TASK_ID_PATTERN.test(taskId))
+            return undefined;
+        const [rawPort = '', nonce = '', signature = '', ...extraCredentials] = credential.split('.');
+        if (extraCredentials.length > 0)
+            return undefined;
+        const port = Number(rawPort);
+        if (!Number.isInteger(port) ||
+            port < 1 ||
+            port > 65535 ||
+            !NONCE_PATTERN.test(nonce) ||
+            !SIGNATURE_PATTERN.test(signature)) {
+            return undefined;
+        }
+        const expectedSignature = this.signature(taskId, port, nonce);
+        if (!secureEqual(signature, expectedSignature))
+            return undefined;
+        const proxyBasePath = `${WORK_PREVIEW_PROXY_PREFIX}/${encodeURIComponent(taskId)}/${credential}/`;
+        if (!url.pathname.startsWith(proxyBasePath))
+            return undefined;
+        const record = this.lookupPreview(taskId);
+        if (record?.preview_status !== 'running' ||
+            record.preview_url !== proxyBasePath) {
+            return undefined;
+        }
+        const upstreamPath = `/${url.pathname.slice(proxyBasePath.length)}${url.search}`;
+        return { taskId, port, proxyBasePath, upstreamPath };
+    }
+    upstreamRequestHeaders(headers, target) {
+        const outgoing = {};
+        for (const [name, value] of Object.entries(headers)) {
+            if (value === undefined ||
+                HOP_BY_HOP_HEADERS.has(name) ||
+                PRIVATE_REQUEST_HEADERS.has(name) ||
+                name.startsWith('cf-') ||
+                name.startsWith('x-forwarded-')) {
+                continue;
+            }
+            outgoing[name] = value;
+        }
+        outgoing.host = `${formatHostForUrl(this.upstreamHost)}:${target.port}`;
+        outgoing['accept-encoding'] = 'identity';
+        if (headers.origin) {
+            outgoing.origin = `http://${formatHostForUrl(this.upstreamHost)}:${target.port}`;
+        }
+        return outgoing;
+    }
+    rewriteLocation(value, target) {
+        try {
+            const location = new URL(value, `http://${formatHostForUrl(this.upstreamHost)}:${target.port}`);
+            if (location.hostname.replace(/^\[|\]$/g, '') === this.upstreamHost &&
+                Number(location.port || 80) === target.port) {
+                return `${target.proxyBasePath}${location.pathname.replace(/^\/+/, '')}${location.search}${location.hash}`;
+            }
+        }
+        catch {
+            // Preserve malformed upstream locations rather than creating a new URL.
+        }
+        return value;
+    }
+    applyResponseHeaders(response, upstream, target, rewritten) {
+        response.status(upstream.statusCode || 502);
+        for (const [name, value] of Object.entries(upstream.headers)) {
+            if (value === undefined ||
+                HOP_BY_HOP_HEADERS.has(name) ||
+                PRIVATE_RESPONSE_HEADERS.has(name) ||
+                name.startsWith('access-control-') ||
+                (rewritten &&
+                    (name === 'content-length' ||
+                        name === 'content-encoding' ||
+                        name === 'etag'))) {
+                continue;
+            }
+            response.setHeader(name, name === 'location' && typeof value === 'string'
+                ? this.rewriteLocation(value, target)
+                : value);
+        }
+        response.setHeader('Cache-Control', 'no-store');
+        // A sandboxed preview has an opaque browser origin. Wildcard CORS lets its
+        // modules and requests reach only this uncredentialed capability URL.
+        response.setHeader('Access-Control-Allow-Origin', '*');
+        response.setHeader('Referrer-Policy', 'no-referrer');
+        response.setHeader('X-Content-Type-Options', 'nosniff');
+        response.setHeader('Permissions-Policy', 'camera=(), microphone=(), geolocation=(), payment=(), usb=(), serial=(), bluetooth=()');
+        const contentType = String(upstream.headers['content-type'] || '');
+        if (contentType.toLowerCase().includes('text/html') ||
+            contentType.toLowerCase().includes('application/xhtml+xml')) {
+            response.setHeader('Content-Security-Policy', `sandbox allow-scripts allow-forms allow-modals allow-downloads; frame-ancestors ${previewFrameAncestors()}`);
+        }
+    }
+    tryHandleUpgrade(request, socket, head) {
+        const target = this.parseTarget(request.url || '');
+        if (!target) {
+            if ((request.url || '').startsWith(`${WORK_PREVIEW_PROXY_PREFIX}/`)) {
+                socket.end('HTTP/1.1 404 Not Found\r\nConnection: close\r\n\r\n');
+                return true;
+            }
+            return false;
+        }
+        const headers = this.upstreamRequestHeaders(request.headers, target);
+        headers.connection = 'Upgrade';
+        headers.upgrade = request.headers.upgrade || 'websocket';
+        const upstreamRequest = http.request({
+            hostname: this.upstreamHost,
+            port: target.port,
+            path: target.upstreamPath,
+            method: request.method,
+            headers,
+        });
+        socket.once('error', error => {
+            logger.debug('Work preview client WebSocket closed with an error:', error);
+        });
+        upstreamRequest.on('upgrade', (upstream, upstreamSocket, upstreamHead) => {
+            const statusLine = `HTTP/${upstream.httpVersion} ${upstream.statusCode || 101} ${upstream.statusMessage || 'Switching Protocols'}\r\n`;
+            const headerLines = [];
+            for (let index = 0; index < upstream.rawHeaders.length; index += 2) {
+                const name = upstream.rawHeaders[index];
+                const value = upstream.rawHeaders[index + 1];
+                if (!name || !SAFE_WEBSOCKET_RESPONSE_HEADERS.has(name.toLowerCase())) {
+                    continue;
+                }
+                headerLines.push(`${name}: ${value}`);
+            }
+            socket.write(`${statusLine}${headerLines.join('\r\n')}\r\n\r\n`);
+            if (upstreamHead.length > 0)
+                socket.write(upstreamHead);
+            if (head.length > 0)
+                upstreamSocket.write(head);
+            upstreamSocket.once('error', error => {
+                logger.debug('Work preview upstream WebSocket closed with an error:', error);
+                socket.destroy();
+            });
+            socket.once('close', () => upstreamSocket.destroy());
+            upstreamSocket.pipe(socket);
+            socket.pipe(upstreamSocket);
+        });
+        upstreamRequest.on('response', upstream => {
+            upstream.resume();
+            socket.end(`HTTP/1.1 ${upstream.statusCode || 502} ${upstream.statusMessage || 'Upgrade Failed'}\r\nConnection: close\r\n\r\n`);
+        });
+        upstreamRequest.on('error', error => {
+            logger.warn('Work preview WebSocket proxy failed:', error.message);
+            if (!socket.destroyed) {
+                socket.end('HTTP/1.1 502 Bad Gateway\r\nConnection: close\r\n\r\n');
+            }
+        });
+        upstreamRequest.end();
+        return true;
+    }
+}
+export const workPreviewProxyService = new WorkPreviewProxyService();
+export default workPreviewProxyService;
+//# sourceMappingURL=workPreviewProxyService.js.map

package/backend/dist/services/workPreviewProxyService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workPreviewProxyService.js","sourceRoot":"","sources":["../../src/services/workPreviewProxyService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAIN,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAAoB,CAAC;AAE9D,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,MAAM;KAC/B,UAAU,CAAC,QAAQ,CAAC;KACpB,MAAM,CACL,sBAAsB,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACzF;KACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACjB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,eAAe;IACf,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,SAAS;IACT,qBAAqB;IACrB,iBAAiB;IACjB,yBAAyB;IACzB,qCAAqC;IACrC,8BAA8B;IAC9B,4BAA4B;IAC5B,8BAA8B;IAC9B,iBAAiB;IACjB,gBAAgB;IAChB,KAAK;IACL,sBAAsB;IACtB,oBAAoB;IACpB,qBAAqB;IACrB,WAAW;IACX,YAAY;IACZ,2BAA2B;IAC3B,kBAAkB;IAClB,iBAAiB;IACjB,mCAAmC;CACpC,CAAC,CAAC;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,YAAY;IACZ,sBAAsB;IACtB,0BAA0B;IAC1B,wBAAwB;IACxB,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,GAAW,EAAE;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC,CAAC;AAgBF,MAAM,oBAAoB,GAAwB,MAAM,CAAC,EAAE,CACzD,WAAW,EAAE;KACV,OAAO,CACN;;oBAEc,CACf;KACA,GAAG,CAAC,MAAM,CAA8B,CAAC;AAE9C,MAAM,mBAAmB,GAAG,GAAW,EAAE;IACvC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAChE,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,CACL,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACxC,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAChD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAU,EAAE,CACpD,KAAK;KACF,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAE3B,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAU,EAAE,CAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAEnE,MAAM,cAAc,GAAG,CAAC,aAAqB,EAAU,EAAE;IACvD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACrD,OAAO,eAAe,mBAAmB,CAAC,aAAa,CAAC;;sBAEpC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAiErB,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,OAAe,EACf,aAAqB,EACb,EAAE,CACV,OAAO,CAAC,OAAO,CAAC,sCAAsC,EAAE,KAAK,aAAa,EAAE,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAAe,EACf,WAAmB,EACnB,aAAqB,EACb,EAAE;IACV,MAAM,cAAc,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAEjD,IACE,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpC,cAAc,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAChD,CAAC;QACD,IAAI,SAAS,GAAG,OAAO,CAAC,OAAO,CAC7B,qEAAqE,EACrE,KAAK,aAAa,EAAE,CACrB,CAAC;QACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,uCAAuC,EACvC,CAAC,MAAM,EAAE,IAAY,EAAE,SAAiB,EAAE,KAAa,EAAE,EAAE,CACzD,GAAG,IAAI,GAAG,SAAS,CAAC,OAAO,CACzB,mBAAmB,EACnB,KAAK,aAAa,EAAE,CACrB,GAAG,KAAK,EAAE,CACd,CAAC;QACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kDAAkD,EAClD,CAAC,MAAM,EAAE,IAAY,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE,CACtD,GAAG,IAAI,GAAG,sBAAsB,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,KAAK,EAAE,CACpE,CAAC;QACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,gDAAgD,EAChD,CAAC,MAAM,EAAE,IAAY,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE,CACrD,GAAG,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,GAAG,KAAK,EAAE,CAC3E,CAAC;QAEF,MAAM,SAAS,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,KAAK,SAAS,EAAE,CAAC;YACxE,CAAC,CAAC,GAAG,SAAS,KAAK,SAAS,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,OAAO,OAAO;aACX,OAAO,CAAC,2BAA2B,EAAE,KAAK,aAAa,EAAE,CAAC;aAC1D,OAAO,CAAC,4BAA4B,EAAE,KAAK,aAAa,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,IACE,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC;QACrC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC;QACrC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,EACrC,CAAC;QACD,OAAO,sBAAsB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,OAAO,CACpB,uCAAuC,EACvC,KAAK,aAAa,EAAE,CACrB,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,WAAmB,EAAW,EAAE;IAC7D,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,CACL,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC5C,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,CACrC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,uBAAuB;IAClC,YACmB,SAAS,mBAAmB,EAC5B,gBAAqC,oBAAoB,EACzD,eAAe,mBAAmB,EAAE;QAFpC,WAAM,GAAN,MAAM,CAAsB;QAC5B,kBAAa,GAAb,aAAa,CAA4C;QACzD,iBAAY,GAAZ,YAAY,CAAwB;QAyKvD,eAAU,GAAG,CAAC,OAAgB,EAAE,QAAkB,EAAQ,EAAE;YAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YAED,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;gBAC5B,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,EAChD,CAAC;gBACD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;gBACvD,QAAQ,CAAC,SAAS,CAChB,8BAA8B,EAC9B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CACzD,CAAC;gBACF,MAAM,gBAAgB,GACpB,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;gBACpD,IAAI,gBAAgB,EAAE,CAAC;oBACrB,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,gBAAgB,CAAC,CAAC;gBACvE,CAAC;gBACD,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBACpD,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAChD,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAClC;gBACE,QAAQ,EAAE,IAAI,CAAC,YAAY;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,YAAY;gBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;aAC9D,EACD,QAAQ,CAAC,EAAE;gBACT,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnE,MAAM,eAAe,GAAG,MAAM,CAC5B,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,UAAU,CACnD,CAAC,WAAW,EAAE,CAAC;gBAChB,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,KAAK,MAAM;oBACzB,eAAe,KAAK,UAAU;oBAC9B,qBAAqB,CAAC,WAAW,CAAC,CAAC;gBAErC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBAC7D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACxB,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnE,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC;oBAC5B,IAAI,UAAU,GAAG,6BAA6B,EAAE,CAAC;wBAC/C,QAAQ,CAAC,OAAO,CACd,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAClE,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACtB,IAAI,QAAQ,CAAC,SAAS;wBAAE,OAAO;oBAC/B,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;oBAC5D,MAAM,IAAI,GAAG,kBAAkB,CAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACtC,WAAW,EACX,MAAM,CAAC,aAAa,CACrB,CAAC;oBACF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;oBAC3B,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;wBAC1B,QAAQ;6BACL,MAAM,CAAC,GAAG,CAAC;6BACX,IAAI,CAAC,YAAY,CAAC;6BAClB,IAAI,CAAC,sBAAsB,CAAC,CAAC;oBAClC,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YAEF,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;gBAClC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACjE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC1B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACvE,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChC,CAAC,CAAC;IA3QC,CAAC;IAEI,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,KAAa;QAC3D,OAAO,MAAM;aACV,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;aACjC,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;aACpC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IAED,gBAAgB,CAAC,MAAc,EAAE,IAAY;QAC3C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAM,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO,GAAG,yBAAyB,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,SAAS,GAAG,CAAC;IACrG,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,yBAAyB,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAEpD,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAEpD,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,gBAAgB,CAAC,GACnE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YACvB,IAAI,GAAG,CAAC;YACR,IAAI,GAAG,KAAM;YACb,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1B,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAClC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,iBAAiB,CAAC;YAAE,OAAO,SAAS,CAAC;QAEjE,MAAM,aAAa,GAAG,GAAG,yBAAyB,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,UAAU,GAAG,CAAC;QAClG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,IACE,MAAM,EAAE,cAAc,KAAK,SAAS;YACpC,MAAM,CAAC,WAAW,KAAK,aAAa,EACpC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACvD,CAAC;IAEO,sBAAsB,CAC5B,OAA4B,EAC5B,MAA0B;QAE1B,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,IACE,KAAK,KAAK,SAAS;gBACnB,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC5B,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;gBACjC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;gBACtB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,CAAC;gBACD,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,QAAQ,CAAC,IAAI,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACxE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,UAAU,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,QAAQ,CAAC,MAAM,GAAG,UAAU,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACnF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,eAAe,CAAC,KAAa,EAAE,MAA0B;QAC/D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,EACL,UAAU,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAC/D,CAAC;YACF,IACE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,YAAY;gBAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,EAC3C,CAAC;gBACD,OAAO,GAAG,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7G,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB,CAC1B,QAAkB,EAClB,QAAyB,EACzB,MAA0B,EAC1B,SAAkB;QAElB,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,IACE,KAAK,KAAK,SAAS;gBACnB,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC5B,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAClC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAClC,CAAC,SAAS;oBACR,CAAC,IAAI,KAAK,gBAAgB;wBACxB,IAAI,KAAK,kBAAkB;wBAC3B,IAAI,KAAK,MAAM,CAAC,CAAC,EACrB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,SAAS,CAChB,IAAI,EACJ,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAC9C,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrC,CAAC,CAAC,KAAK,CACV,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAChD,2EAA2E;QAC3E,sEAAsE;QACtE,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACvD,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACrD,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACxD,QAAQ,CAAC,SAAS,CAChB,oBAAoB,EACpB,uFAAuF,CACxF,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,IACE,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC/C,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAC3D,CAAC;YACD,QAAQ,CAAC,SAAS,CAChB,yBAAyB,EACzB,mFAAmF,qBAAqB,EAAE,EAAE,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAuGD,gBAAgB,CACd,OAAwB,EACxB,MAAc,EACd,IAAY;QAEZ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,yBAAyB,GAAG,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBAClE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrE,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC;QACzD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,YAAY;YACzB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;SACR,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YAC3B,MAAM,CAAC,KAAK,CACV,qDAAqD,EACrD,KAAK,CACN,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE;YACvE,MAAM,UAAU,GAAG,QAAQ,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,aAAa,IAAI,qBAAqB,MAAM,CAAC;YACvI,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC,IAAI,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACtE,SAAS;gBACX,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;gBACnC,MAAM,CAAC,KAAK,CACV,uDAAuD,EACvD,KAAK,CACN,CAAC;gBACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;YACrD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACxC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CACR,YAAY,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,aAAa,IAAI,gBAAgB,+BAA+B,CACpH,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,EAAE,CAAC;AACrE,eAAe,uBAAuB,CAAC"}