llm-trust-guard 4.0.0

package/dist/guards/mcp-security-guard.js

@@ -0,0 +1,618 @@
+"use strict";
+/**
+ * MCPSecurityGuard (L16)
+ *
+ * Secures Model Context Protocol (MCP) tool integrations.
+ * Prevents tool shadowing, server impersonation, and supply chain attacks.
+ *
+ * Threat Model:
+ * - ASI04: Agentic Supply Chain Vulnerabilities
+ * - CVE-2025-68145, CVE-2025-68143, CVE-2025-68144: MCP RCE vulnerabilities
+ * - CVE-2025-6514: mcp-remote command injection
+ * - CVE-2025-32711: EchoLeak - silent data exfiltration
+ * - Tool Shadowing: Malicious MCP servers impersonating legitimate tools
+ *
+ * Protection Capabilities:
+ * - MCP server identity verification (signature-based)
+ * - Tool registration allowlist enforcement
+ * - Dynamic tool registration monitoring
+ * - OAuth endpoint validation
+ * - Tool shadowing detection
+ * - Server reputation scoring
+ * - Command injection prevention
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCPSecurityGuard = void 0;
+const crypto = __importStar(require("crypto"));
+class MCPSecurityGuard {
+    constructor(config = {}) {
+        this.registeredServers = new Map();
+        this.registeredTools = new Map();
+        this.serverReputation = new Map();
+        this.toolToServer = new Map(); // tool name -> server ID
+        this.serverViolations = new Map();
+        // Command injection patterns (based on CVE-2025-6514 and similar)
+        this.COMMAND_INJECTION_PATTERNS = [
+            // Shell command injection
+            { name: "shell_injection", pattern: /[;&|`$]|\$\(|\)\s*[;&|]|`[^`]+`/g, severity: 50 },
+            { name: "command_substitution", pattern: /\$\{[^}]+\}|\$\([^)]+\)/g, severity: 50 },
+            { name: "pipe_injection", pattern: /\|\s*(cat|rm|curl|wget|nc|bash|sh|exec)/i, severity: 55 },
+            // Path traversal
+            { name: "path_traversal", pattern: /\.\.[\/\\]|\.\.%2[fF]/g, severity: 45 },
+            { name: "absolute_path", pattern: /^\/(?:etc|usr|var|tmp|bin|root)/i, severity: 40 },
+            // URL-based injection (for OAuth endpoints)
+            { name: "oauth_injection", pattern: /authorization_endpoint.*[;&|`$]/i, severity: 55 },
+            { name: "redirect_manipulation", pattern: /redirect_uri.*[^\w\-_.~:/?#[\]@!$&'()*+,;=%]/i, severity: 45 },
+            // AppleScript injection (CVE-2025-68145 style)
+            { name: "applescript_injection", pattern: /osascript|do\s+shell\s+script|tell\s+application/i, severity: 55 },
+            // Git-specific injection patterns
+            { name: "git_injection", pattern: /--upload-pack|--receive-pack|-c\s+core\./i, severity: 50 },
+            { name: "git_url_injection", pattern: /ext::|file:\/\/|ssh:\/\/.*@/i, severity: 45 },
+            // Argument injection
+            { name: "argument_injection", pattern: /\s--[a-z]+=.*[;&|`$]/i, severity: 45 },
+            // Environment variable injection
+            { name: "env_injection", pattern: /\bLD_PRELOAD\b|\bPATH\s*=/i, severity: 50 },
+        ];
+        // Tool shadowing indicators
+        this.SHADOWING_INDICATORS = [
+            // Similar names to common legitimate tools
+            { legitimate: "file_reader", suspicious: /file[-_]?read(er)?s?|read[-_]?files?/i },
+            { legitimate: "database_query", suspicious: /db[-_]?query|sql[-_]?query|query[-_]?db/i },
+            { legitimate: "email_sender", suspicious: /send[-_]?emails?|email[-_]?send(er)?/i },
+            { legitimate: "api_caller", suspicious: /call[-_]?api|api[-_]?call(er)?/i },
+            { legitimate: "code_executor", suspicious: /exec[-_]?code|run[-_]?code|code[-_]?run/i },
+        ];
+        // Malicious server patterns
+        this.MALICIOUS_SERVER_PATTERNS = [
+            /postmark-mcp.*fake/i, // Known npm impersonation attack
+            /unofficial/i,
+            /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/, // IP-based servers
+            /pastebin|gist\.github/i,
+            /temp|tmp|test.*mcp/i,
+        ];
+        this.config = {
+            requireServerSignature: config.requireServerSignature ?? false,
+            trustedServers: config.trustedServers ?? [],
+            blockedServers: config.blockedServers ?? [],
+            allowDynamicRegistration: config.allowDynamicRegistration ?? true,
+            toolAllowlist: config.toolAllowlist ?? [],
+            toolBlocklist: config.toolBlocklist ?? [],
+            validateOAuthEndpoints: config.validateOAuthEndpoints ?? true,
+            allowedOAuthDomains: config.allowedOAuthDomains ?? [],
+            detectToolShadowing: config.detectToolShadowing ?? true,
+            minServerReputation: config.minServerReputation ?? 30,
+            strictMode: config.strictMode ?? false,
+            customInjectionPatterns: config.customInjectionPatterns ?? [],
+        };
+        // Pre-register trusted servers
+        for (const server of this.config.trustedServers) {
+            this.registeredServers.set(server.serverId, {
+                ...server,
+                registeredAt: Date.now(),
+                reputationScore: server.reputationScore ?? 90,
+            });
+            this.serverReputation.set(server.serverId, server.reputationScore ?? 90);
+        }
+    }
+    /**
+     * Validate MCP server registration
+     */
+    validateServerRegistration(registration, requestId) {
+        const reqId = requestId || `mcp-reg-${Date.now()}`;
+        const violations = [];
+        let serverVerified = false;
+        let signatureValid = false;
+        let isShadowing = false;
+        let toolsAllowed = true;
+        let reputationScore = 50; // Neutral starting point
+        const { server, tools, oauth, signature, timestamp } = registration;
+        // Check if server is blocked
+        if (this.isServerBlocked(server.serverId, server.name)) {
+            violations.push("server_blocked");
+            reputationScore = 0;
+        }
+        // Check for malicious server patterns
+        const maliciousCheck = this.checkMaliciousPatterns(server);
+        if (maliciousCheck.suspicious) {
+            violations.push(...maliciousCheck.violations);
+            reputationScore -= 30;
+        }
+        // Verify server signature if required
+        if (this.config.requireServerSignature) {
+            if (!signature || !server.publicKey) {
+                violations.push("missing_server_signature");
+            }
+            else {
+                signatureValid = this.verifyServerSignature(server, signature);
+                if (!signatureValid) {
+                    violations.push("invalid_server_signature");
+                    reputationScore -= 40;
+                }
+                else {
+                    serverVerified = true;
+                    reputationScore += 20;
+                }
+            }
+        }
+        else {
+            // No signature required, basic verification
+            serverVerified = true;
+        }
+        // Check for tool shadowing
+        if (this.config.detectToolShadowing) {
+            const shadowingCheck = this.detectToolShadowing(tools, server.serverId);
+            if (shadowingCheck.detected) {
+                isShadowing = true;
+                violations.push(...shadowingCheck.violations);
+                reputationScore -= 50;
+            }
+        }
+        // Validate tools
+        for (const tool of tools) {
+            // Check tool allowlist/blocklist
+            if (this.config.toolAllowlist.length > 0 && !this.config.toolAllowlist.includes(tool.name)) {
+                violations.push(`tool_not_in_allowlist: ${tool.name}`);
+                toolsAllowed = false;
+            }
+            if (this.config.toolBlocklist.includes(tool.name)) {
+                violations.push(`tool_blocked: ${tool.name}`);
+                toolsAllowed = false;
+            }
+            // Check for injection in tool description
+            const descInjection = this.detectInjection(tool.description);
+            if (descInjection.detected) {
+                violations.push(`injection_in_tool_description: ${tool.name}`);
+                reputationScore -= 20;
+            }
+        }
+        // Validate OAuth endpoints if present
+        if (oauth && this.config.validateOAuthEndpoints) {
+            const oauthCheck = this.validateOAuthConfig(oauth);
+            if (!oauthCheck.valid) {
+                violations.push(...oauthCheck.violations);
+                reputationScore -= 30;
+            }
+        }
+        // Check timestamp (prevent replay attacks)
+        const age = Date.now() - timestamp;
+        if (age < 0) {
+            violations.push("future_timestamp");
+        }
+        else if (age > 5 * 60 * 1000) { // 5 minutes
+            violations.push("stale_registration");
+        }
+        // Check dynamic registration policy
+        if (!this.config.allowDynamicRegistration && !this.isTrustedServer(server.serverId)) {
+            violations.push("dynamic_registration_disabled");
+        }
+        // Final reputation score
+        reputationScore = Math.max(0, Math.min(100, reputationScore));
+        const blocked = reputationScore < this.config.minServerReputation ||
+            (this.config.strictMode && violations.length > 0) ||
+            isShadowing;
+        // Register server if allowed
+        if (!blocked) {
+            this.registerServer(server, tools, reputationScore);
+        }
+        return {
+            allowed: !blocked,
+            reason: blocked
+                ? `Server registration blocked: ${violations.slice(0, 3).join(", ")}`
+                : "Server registration validated",
+            violations,
+            request_id: reqId,
+            server_analysis: {
+                server_verified: serverVerified,
+                signature_valid: signatureValid,
+                reputation_score: reputationScore,
+                is_shadowing: isShadowing,
+                tools_allowed: toolsAllowed,
+            },
+            recommendations: this.generateRecommendations(violations, "registration"),
+        };
+    }
+    /**
+     * Validate MCP tool call
+     */
+    validateToolCall(toolCall, requestId) {
+        const reqId = requestId || `mcp-call-${Date.now()}`;
+        const violations = [];
+        let toolRegistered = false;
+        let toolAllowed = true;
+        let parametersSafe = true;
+        let injectionDetected = false;
+        let riskLevel = "low";
+        const { toolName, serverId, parameters } = toolCall;
+        // Check if tool is registered
+        const tool = this.registeredTools.get(toolName);
+        if (tool) {
+            toolRegistered = true;
+            riskLevel = tool.riskLevel || "low";
+            // Verify tool belongs to the claimed server
+            const expectedServer = this.toolToServer.get(toolName);
+            if (expectedServer && expectedServer !== serverId) {
+                violations.push("server_tool_mismatch");
+                injectionDetected = true; // Possible tool shadowing attack
+            }
+        }
+        else {
+            violations.push("tool_not_registered");
+        }
+        // Check server reputation
+        const serverRep = this.serverReputation.get(serverId) ?? 0;
+        if (serverRep < this.config.minServerReputation) {
+            violations.push("low_server_reputation");
+        }
+        // Check tool allowlist/blocklist
+        if (this.config.toolAllowlist.length > 0 && !this.config.toolAllowlist.includes(toolName)) {
+            violations.push("tool_not_in_allowlist");
+            toolAllowed = false;
+        }
+        if (this.config.toolBlocklist.includes(toolName)) {
+            violations.push("tool_blocked");
+            toolAllowed = false;
+        }
+        // Scan parameters for injection
+        const paramCheck = this.scanParameters(parameters);
+        if (paramCheck.injectionDetected) {
+            injectionDetected = true;
+            parametersSafe = false;
+            violations.push(...paramCheck.violations);
+        }
+        // Check for high-risk operations without verification
+        if (this.isHighRiskOperation(toolName, parameters)) {
+            riskLevel = "high";
+            if (serverRep < 70) {
+                violations.push("high_risk_low_reputation");
+            }
+        }
+        // Update server violation count
+        if (violations.length > 0) {
+            const currentViolations = this.serverViolations.get(serverId) || 0;
+            this.serverViolations.set(serverId, currentViolations + violations.length);
+            // Degrade reputation
+            const currentRep = this.serverReputation.get(serverId) || 50;
+            this.serverReputation.set(serverId, Math.max(0, currentRep - violations.length * 5));
+        }
+        const blocked = !toolRegistered ||
+            !toolAllowed ||
+            injectionDetected ||
+            (this.config.strictMode && violations.length > 0);
+        return {
+            allowed: !blocked,
+            reason: blocked
+                ? `Tool call blocked: ${violations.slice(0, 3).join(", ")}`
+                : "Tool call validated",
+            violations,
+            request_id: reqId,
+            tool_analysis: {
+                tool_registered: toolRegistered,
+                tool_allowed: toolAllowed,
+                parameters_safe: parametersSafe,
+                injection_detected: injectionDetected,
+                risk_level: riskLevel,
+            },
+            server_analysis: {
+                server_verified: this.registeredServers.has(serverId),
+                signature_valid: true, // Already validated at registration
+                reputation_score: serverRep,
+                is_shadowing: false,
+                tools_allowed: toolAllowed,
+            },
+            recommendations: this.generateRecommendations(violations, "tool_call"),
+        };
+    }
+    /**
+     * Register a trusted MCP server
+     */
+    registerTrustedServer(server, tools) {
+        this.registerServer(server, tools, 90);
+    }
+    /**
+     * Block an MCP server
+     */
+    blockServer(serverIdOrPattern) {
+        if (!this.config.blockedServers.includes(serverIdOrPattern)) {
+            this.config.blockedServers.push(serverIdOrPattern);
+        }
+        // Remove from registered if exists
+        this.registeredServers.delete(serverIdOrPattern);
+        this.serverReputation.set(serverIdOrPattern, 0);
+    }
+    /**
+     * Get server reputation
+     */
+    getServerReputation(serverId) {
+        return this.serverReputation.get(serverId) ?? 0;
+    }
+    /**
+     * Update server reputation
+     */
+    updateServerReputation(serverId, delta) {
+        const current = this.serverReputation.get(serverId) ?? 50;
+        this.serverReputation.set(serverId, Math.max(0, Math.min(100, current + delta)));
+    }
+    /**
+     * Get all registered servers
+     */
+    getRegisteredServers() {
+        return [...this.registeredServers.values()];
+    }
+    /**
+     * Get all registered tools
+     */
+    getRegisteredTools() {
+        return [...this.registeredTools.values()];
+    }
+    /**
+     * Check if a tool name is potentially shadowing another
+     */
+    isToolShadowing(toolName) {
+        for (const indicator of this.SHADOWING_INDICATORS) {
+            if (indicator.suspicious.test(toolName) && toolName !== indicator.legitimate) {
+                return { shadowing: true, legitimate: indicator.legitimate };
+            }
+        }
+        return { shadowing: false };
+    }
+    /**
+     * Get violation count for a server
+     */
+    getServerViolations(serverId) {
+        return this.serverViolations.get(serverId) || 0;
+    }
+    /**
+     * Reset server violations
+     */
+    resetServerViolations(serverId) {
+        this.serverViolations.delete(serverId);
+    }
+    // Private methods
+    registerServer(server, tools, reputation) {
+        this.registeredServers.set(server.serverId, {
+            ...server,
+            registeredAt: Date.now(),
+            reputationScore: reputation,
+        });
+        this.serverReputation.set(server.serverId, reputation);
+        // Register tools
+        for (const tool of tools) {
+            this.registeredTools.set(tool.name, tool);
+            this.toolToServer.set(tool.name, server.serverId);
+        }
+    }
+    isServerBlocked(serverId, serverName) {
+        for (const blocked of this.config.blockedServers) {
+            if (serverId.includes(blocked) || (serverName && serverName.includes(blocked))) {
+                return true;
+            }
+            try {
+                const regex = new RegExp(blocked, "i");
+                if (regex.test(serverId) || (serverName && regex.test(serverName))) {
+                    return true;
+                }
+            }
+            catch {
+                // Invalid regex, treat as string
+            }
+        }
+        return false;
+    }
+    isTrustedServer(serverId) {
+        return this.config.trustedServers.some((s) => s.serverId === serverId);
+    }
+    checkMaliciousPatterns(server) {
+        const violations = [];
+        const checkStr = `${server.serverId} ${server.name} ${JSON.stringify(server.metadata || {})}`;
+        for (const pattern of this.MALICIOUS_SERVER_PATTERNS) {
+            if (pattern.test(checkStr)) {
+                violations.push(`malicious_pattern: ${pattern.source.substring(0, 20)}`);
+            }
+        }
+        return {
+            suspicious: violations.length > 0,
+            violations,
+        };
+    }
+    verifyServerSignature(server, signature) {
+        if (!server.publicKey)
+            return false;
+        try {
+            const data = JSON.stringify({
+                serverId: server.serverId,
+                name: server.name,
+                version: server.version,
+            });
+            const verify = crypto.createVerify("SHA256");
+            verify.update(data);
+            return verify.verify(server.publicKey, signature, "hex");
+        }
+        catch {
+            return false;
+        }
+    }
+    detectToolShadowing(tools, serverId) {
+        const violations = [];
+        for (const tool of tools) {
+            // Check if this tool name is already registered by another server
+            const existingServer = this.toolToServer.get(tool.name);
+            if (existingServer && existingServer !== serverId) {
+                violations.push(`tool_shadowing: ${tool.name} (already registered by ${existingServer})`);
+            }
+            // Check for suspicious similar names
+            const shadowCheck = this.isToolShadowing(tool.name);
+            if (shadowCheck.shadowing) {
+                violations.push(`suspicious_tool_name: ${tool.name} (similar to ${shadowCheck.legitimate})`);
+            }
+        }
+        return {
+            detected: violations.length > 0,
+            violations,
+        };
+    }
+    validateOAuthConfig(oauth) {
+        const violations = [];
+        // Check authorization endpoint for injection (CVE-2025-6514)
+        if (oauth.authorizationEndpoint) {
+            const injection = this.detectInjection(oauth.authorizationEndpoint);
+            if (injection.detected) {
+                violations.push("oauth_authorization_endpoint_injection");
+            }
+            // Check domain allowlist
+            if (this.config.allowedOAuthDomains.length > 0) {
+                try {
+                    const url = new URL(oauth.authorizationEndpoint);
+                    const domainAllowed = this.config.allowedOAuthDomains.some((d) => url.hostname.endsWith(d));
+                    if (!domainAllowed) {
+                        violations.push(`oauth_domain_not_allowed: ${url.hostname}`);
+                    }
+                }
+                catch {
+                    violations.push("invalid_oauth_authorization_url");
+                }
+            }
+        }
+        // Check token endpoint
+        if (oauth.tokenEndpoint) {
+            const injection = this.detectInjection(oauth.tokenEndpoint);
+            if (injection.detected) {
+                violations.push("oauth_token_endpoint_injection");
+            }
+        }
+        return {
+            valid: violations.length === 0,
+            violations,
+        };
+    }
+    detectInjection(value) {
+        const patterns = [];
+        const allPatterns = [...this.COMMAND_INJECTION_PATTERNS, ...this.config.customInjectionPatterns.map((p, i) => ({
+                name: `custom_${i}`,
+                pattern: p,
+                severity: 50,
+            }))];
+        for (const { name, pattern } of allPatterns) {
+            if (pattern.test(value)) {
+                patterns.push(name);
+            }
+        }
+        return {
+            detected: patterns.length > 0,
+            patterns,
+        };
+    }
+    scanParameters(parameters) {
+        const violations = [];
+        const paramStr = JSON.stringify(parameters);
+        // Check for command injection in parameter values
+        const injection = this.detectInjection(paramStr);
+        if (injection.detected) {
+            violations.push(...injection.patterns.map((p) => `param_injection_${p}`));
+        }
+        // Check for excessively long values (potential DoS or buffer overflow)
+        for (const [key, value] of Object.entries(parameters)) {
+            if (typeof value === "string" && value.length > 10000) {
+                violations.push(`oversized_parameter: ${key}`);
+            }
+        }
+        // Check for suspicious keys
+        const suspiciousKeys = ["__proto__", "constructor", "prototype", "eval", "exec"];
+        for (const key of Object.keys(parameters)) {
+            if (suspiciousKeys.includes(key.toLowerCase())) {
+                violations.push(`suspicious_parameter_key: ${key}`);
+            }
+        }
+        return {
+            injectionDetected: violations.length > 0,
+            violations,
+        };
+    }
+    isHighRiskOperation(toolName, parameters) {
+        const highRiskTools = [
+            "execute_code", "run_command", "shell_exec", "eval",
+            "file_write", "file_delete", "database_write", "database_delete",
+            "send_email", "make_payment", "transfer_funds",
+            "modify_permissions", "create_user", "delete_user",
+        ];
+        const toolLower = toolName.toLowerCase();
+        if (highRiskTools.some((t) => toolLower.includes(t))) {
+            return true;
+        }
+        // Check parameters for high-risk indicators
+        const paramStr = JSON.stringify(parameters).toLowerCase();
+        if (paramStr.includes("delete") || paramStr.includes("drop") ||
+            paramStr.includes("truncate") || paramStr.includes("exec")) {
+            return true;
+        }
+        return false;
+    }
+    generateRecommendations(violations, context) {
+        const recommendations = [];
+        if (context === "registration") {
+            if (violations.some((v) => v.includes("signature"))) {
+                recommendations.push("Enable server signature verification for production");
+            }
+            if (violations.some((v) => v.includes("shadowing"))) {
+                recommendations.push("Review tool names for potential shadowing attacks");
+            }
+            if (violations.some((v) => v.includes("oauth"))) {
+                recommendations.push("Configure OAuth domain allowlist");
+            }
+            if (violations.some((v) => v.includes("malicious"))) {
+                recommendations.push("Block suspicious servers and review server sources");
+            }
+        }
+        else {
+            if (violations.some((v) => v.includes("injection"))) {
+                recommendations.push("Sanitize tool parameters before execution");
+            }
+            if (violations.some((v) => v.includes("reputation"))) {
+                recommendations.push("Only use tools from high-reputation servers");
+            }
+            if (violations.some((v) => v.includes("not_registered"))) {
+                recommendations.push("Register tools before allowing execution");
+            }
+        }
+        if (recommendations.length === 0) {
+            recommendations.push(context === "registration"
+                ? "Server registration validated successfully"
+                : "Tool call validated successfully");
+        }
+        return recommendations;
+    }
+}
+exports.MCPSecurityGuard = MCPSecurityGuard;
+//# sourceMappingURL=mcp-security-guard.js.map

package/dist/guards/mcp-security-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-security-guard.js","sourceRoot":"","sources":["../../src/guards/mcp-security-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AAuHjC,MAAa,gBAAgB;IAwD3B,YAAY,SAAiC,EAAE;QAtDvC,sBAAiB,GAAmC,IAAI,GAAG,EAAE,CAAC;QAC9D,oBAAe,GAAmC,IAAI,GAAG,EAAE,CAAC;QAC5D,qBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;QAClD,iBAAY,GAAwB,IAAI,GAAG,EAAE,CAAC,CAAC,yBAAyB;QACxE,qBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;QAE1D,kEAAkE;QACjD,+BAA0B,GAA+D;YACxG,0BAA0B;YAC1B,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kCAAkC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACtF,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,EAAE;YACnF,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0CAA0C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE7F,iBAAiB;YACjB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC3E,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kCAAkC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEpF,4CAA4C;YAC5C,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kCAAkC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACtF,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEzG,+CAA+C;YAC/C,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,mDAAmD,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE7G,kCAAkC;YAClC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,2CAA2C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7F,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,8BAA8B,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEpF,qBAAqB;YACrB,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE9E,iCAAiC;YACjC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4BAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC/E,CAAC;QAEF,4BAA4B;QACX,yBAAoB,GAAG;YACtC,2CAA2C;YAC3C,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,uCAAuC,EAAE;YAClF,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,0CAA0C,EAAE;YACxF,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,uCAAuC,EAAE;YACnF,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,iCAAiC,EAAE;YAC3E,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,0CAA0C,EAAE;SACxF,CAAC;QAEF,4BAA4B;QACX,8BAAyB,GAAG;YAC3C,qBAAqB,EAAK,iCAAiC;YAC3D,aAAa;YACb,oCAAoC,EAAG,mBAAmB;YAC1D,wBAAwB;YACxB,qBAAqB;SACtB,CAAC;QAGA,IAAI,CAAC,MAAM,GAAG;YACZ,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;YAC9D,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,wBAAwB,EAAE,MAAM,CAAC,wBAAwB,IAAI,IAAI;YACjE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YACzC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YACzC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE;YACrD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE;YACrD,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;YACtC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,EAAE;SAC9D,CAAC;QAEF,+BAA+B;QAC/B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC1C,GAAG,MAAM;gBACT,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;gBACxB,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,0BAA0B,CACxB,YAAmC,EACnC,SAAkB;QAElB,MAAM,KAAK,GAAG,SAAS,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACnD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,YAAY,GAAG,IAAI,CAAC;QACxB,IAAI,eAAe,GAAG,EAAE,CAAC,CAAC,yBAAyB;QAEnD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;QAEpE,6BAA6B;QAC7B,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAClC,eAAe,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,sCAAsC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAC9C,eAAe,IAAI,EAAE,CAAC;QACxB,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC/D,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;oBAC5C,eAAe,IAAI,EAAE,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,IAAI,CAAC;oBACtB,eAAe,IAAI,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4CAA4C;YAC5C,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxE,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;gBAC5B,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;gBAC9C,eAAe,IAAI,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,iBAAiB;QACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,iCAAiC;YACjC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3F,UAAU,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvD,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,UAAU,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9C,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;YAED,0CAA0C;YAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7D,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC/D,eAAe,IAAI,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAChD,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC1C,eAAe,IAAI,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACnC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,YAAY;YAC5C,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpF,UAAU,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,yBAAyB;QACzB,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAC/D,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;YACjD,WAAW,CAAC;QAEd,6BAA6B;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QACtD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,OAAO;YACjB,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,gCAAgC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACrE,CAAC,CAAC,+BAA+B;YACnC,UAAU;YACV,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE;gBACf,eAAe,EAAE,cAAc;gBAC/B,eAAe,EAAE,cAAc;gBAC/B,gBAAgB,EAAE,eAAe;gBACjC,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,YAAY;aAC5B;YACD,eAAe,EAAE,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,cAAc,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,QAAqB,EACrB,SAAkB;QAElB,MAAM,KAAK,GAAG,SAAS,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,cAAc,GAAG,IAAI,CAAC;QAC1B,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;QAEpD,8BAA8B;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,IAAI,EAAE,CAAC;YACT,cAAc,GAAG,IAAI,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;YAEpC,4CAA4C;YAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,cAAc,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;gBAClD,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACxC,iBAAiB,GAAG,IAAI,CAAC,CAAC,iCAAiC;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1F,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACzC,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAChC,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;QAED,gCAAgC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;YACjC,iBAAiB,GAAG,IAAI,CAAC;YACzB,cAAc,GAAG,KAAK,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QAED,sDAAsD;QACtD,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACnD,SAAS,GAAG,MAAM,CAAC;YACnB,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;gBACnB,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAE3E,qBAAqB;YACrB,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,cAAc;YAC7B,CAAC,WAAW;YACZ,iBAAiB;YACjB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEpD,OAAO;YACL,OAAO,EAAE,CAAC,OAAO;YACjB,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,sBAAsB,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC3D,CAAC,CAAC,qBAAqB;YACzB,UAAU;YACV,UAAU,EAAE,KAAK;YACjB,aAAa,EAAE;gBACb,eAAe,EAAE,cAAc;gBAC/B,YAAY,EAAE,WAAW;gBACzB,eAAe,EAAE,cAAc;gBAC/B,kBAAkB,EAAE,iBAAiB;gBACrC,UAAU,EAAE,SAAS;aACtB;YACD,eAAe,EAAE;gBACf,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACrD,eAAe,EAAE,IAAI,EAAE,oCAAoC;gBAC3D,gBAAgB,EAAE,SAAS;gBAC3B,YAAY,EAAE,KAAK;gBACnB,aAAa,EAAE,WAAW;aAC3B;YACD,eAAe,EAAE,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,WAAW,CAAC;SACvE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,MAAyB,EAAE,KAA0B;QACzE,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,iBAAyB;QACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrD,CAAC;QACD,mCAAmC;QACnC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,QAAgB,EAAE,KAAa;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB;QAC9B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;gBAC7E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,QAAgB;QACpC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,kBAAkB;IAEV,cAAc,CAAC,MAAyB,EAAE,KAA0B,EAAE,UAAkB;QAC9F,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;YAC1C,GAAG,MAAM;YACT,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEvD,iBAAiB;QACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,QAAgB,EAAE,UAAmB;QAC3D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC/E,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;oBACnE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACzE,CAAC;IAEO,sBAAsB,CAAC,MAAyB;QAItD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAE9F,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YACjC,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,MAAyB,EAAE,SAAiB;QACxE,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAA0B,EAAE,QAAgB;QAItE,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,kEAAkE;YAClE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,cAAc,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;gBAClD,UAAU,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,2BAA2B,cAAc,GAAG,CAAC,CAAC;YAC5F,CAAC;YAED,qCAAqC;YACrC,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,gBAAgB,WAAW,CAAC,UAAU,GAAG,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC/B,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,KAI3B;QACC,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,6DAA6D;QAC7D,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACpE,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YAED,yBAAyB;YACzB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACjD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CACxD,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChC,CAAC;oBACF,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,UAAU,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5D,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAC9B,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,0BAA0B,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7G,IAAI,EAAE,UAAU,CAAC,EAAE;gBACnB,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC,CAAC,CAAC;QAEL,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC7B,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,UAA+B;QAIpD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAE5C,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,uEAAuE;QACvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;gBACtD,UAAU,CAAC,IAAI,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,OAAO;YACL,iBAAiB,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YACxC,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,QAAgB,EAAE,UAA+B;QAC3E,MAAM,aAAa,GAAG;YACpB,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM;YACnD,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB;YAChE,YAAY,EAAE,cAAc,EAAE,gBAAgB;YAC9C,oBAAoB,EAAE,aAAa,EAAE,aAAa;SACnD,CAAC;QAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxD,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,uBAAuB,CAAC,UAAoB,EAAE,OAAqC;QACzF,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAChD,eAAe,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACpD,eAAe,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBACrD,eAAe,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;gBACzD,eAAe,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,eAAe,CAAC,IAAI,CAAC,OAAO,KAAK,cAAc;gBAC7C,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,kCAAkC,CACrC,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF;AA3oBD,4CA2oBC"}