ramosedb 0.0.1 → 0.4.0

package/dist/internal/authorization/bind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/bind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAkB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAe3D,OAAO,EAEL,KAAK,oBAAoB,IAAI,wBAAwB,EAIrD,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAK1B,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EACV,0BAA0B,EAG1B,yBAAyB,EAG1B,MAAM,WAAW,CAAC;AAInB,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,eAAe,CAAC;AAwkBtD,eAAO,MAAM,wBAAwB,UAC5B,mBAAmB,KACzB,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,WAAW,CAsClD,CAAC;AAwBL,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAK7B,CAAC;AAEH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,CAChB,MAAM,EAAE,oBAAoB,KACzB,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;CACpD;;AAED,qBAAa,oBAAqB,SAAQ,yBAGM;CAAG;AAEnD,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAM1C,CAAC"}

package/dist/internal/authorization/bind.js

@@ -0,0 +1,485 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { CatalogMismatch, InvalidIR } from "./failures.js";
+import { BOUND_AUTHORIZATION_IR_VERSION, } from "./ir.js";
+import { AUTHORIZATION_LANGUAGE_VERSION } from "./version.js";
+import { canonicalAuthorizationRuleMaterial, hashCanonicalRule } from "./decode.js";
+const SEPARATOR = "\u0000";
+const ownerKey = (owner) => `${owner.kind}${SEPARATOR}${owner.name}`;
+const fieldKey = (owner, localName) => `${owner.kind}${SEPARATOR}${owner.name}${SEPARATOR}${localName}`;
+const operationKey = (owner, localName, target) => `${owner.kind}${SEPARATOR}${owner.name}${SEPARATOR}${localName}${SEPARATOR}${target}`;
+const ownerNameLocalKey = (name, localName) => `${name}${SEPARATOR}${localName}`;
+const otherOwnerKind = (kind) => (kind === "entity" ? "trait" : "entity");
+const invalid = (message) => Result.fail(new InvalidIR({ message }));
+const mismatch = (fields) => Result.fail(new CatalogMismatch(fields));
+const isBlank = (value) => value.length === 0;
+const requireNonBlank = (value, label) => isBlank(value) ? mismatch({ message: `blank ${label}` }) : Result.succeed(value);
+const intern = (map, key, value, label) => {
+    if (map.has(key)) {
+        return invalid(`ambiguous ${label}`);
+    }
+    map.set(key, value);
+    return Result.succeed(undefined);
+};
+const pushIndex = (map, key, value) => {
+    const existing = map.get(key);
+    if (existing === undefined)
+        map.set(key, [value]);
+    else
+        existing.push(value);
+};
+const catalogOfIdentity = (identity, expected, label) => {
+    if (identity.catalog !== expected.catalog) {
+        return mismatch({
+            message: `cross-catalog ${label}`,
+            expected: expected.catalog,
+            actual: identity.catalog,
+        });
+    }
+    return Result.succeed(undefined);
+};
+const validateTarget = (target, descriptor) => Result.gen(function* () {
+    yield* Result.all([
+        requireNonBlank(target.database, "database"),
+        requireNonBlank(target.catalog, "catalog id"),
+        requireNonBlank(target.catalogVersion, "catalog version"),
+        requireNonBlank(target.schemaFingerprint, "schema fingerprint"),
+        requireNonBlank(descriptor.database, "descriptor database"),
+        requireNonBlank(descriptor.id, "descriptor catalog id"),
+        requireNonBlank(descriptor.version, "descriptor catalog version"),
+        requireNonBlank(descriptor.fingerprint, "descriptor schema fingerprint"),
+    ]);
+    if (target.database !== descriptor.database) {
+        return yield* mismatch({
+            message: "cross-database catalog",
+            expectedDatabase: target.database,
+            actualDatabase: descriptor.database,
+        });
+    }
+    if (target.catalog !== descriptor.id) {
+        return yield* mismatch({
+            message: "cross-catalog descriptor",
+            expected: target.catalog,
+            actual: descriptor.id,
+        });
+    }
+    if (target.catalogVersion !== descriptor.version) {
+        return yield* mismatch({
+            message: "stale catalog version",
+            expected: target.catalog,
+            actual: descriptor.id,
+            expectedVersion: target.catalogVersion,
+            actualVersion: descriptor.version,
+        });
+    }
+    if (target.schemaFingerprint !== descriptor.fingerprint) {
+        return yield* mismatch({
+            message: "schema fingerprint mismatch",
+            expected: target.catalog,
+            actual: descriptor.id,
+            expectedFingerprint: target.schemaFingerprint,
+            actualFingerprint: descriptor.fingerprint,
+        });
+    }
+});
+const indexCatalog = (target, descriptor) => Result.gen(function* () {
+    yield* validateTarget(target, descriptor);
+    const entities = new Map();
+    const traits = new Map();
+    const fields = new Map();
+    const operations = new Map();
+    const owners = new Map();
+    const fieldsByOwnerName = new Map();
+    for (const entity of descriptor.entities) {
+        yield* catalogOfIdentity(entity.id, target, "entity");
+        if (isBlank(entity.id.name))
+            return yield* invalid("blank entity name");
+        yield* intern(entities, entity.id.name, entity.id, `entity identity '${entity.id.name}'`);
+        const owner = { kind: "entity", name: entity.id.name };
+        yield* intern(owners, ownerKey(owner), owner, `owner '${ownerKey(owner)}'`);
+    }
+    for (const trait of descriptor.traits) {
+        yield* catalogOfIdentity(trait.id, target, "trait");
+        if (isBlank(trait.id.name))
+            return yield* invalid("blank trait name");
+        yield* intern(traits, trait.id.name, trait.id, `trait identity '${trait.id.name}'`);
+        const owner = { kind: "trait", name: trait.id.name };
+        yield* intern(owners, ownerKey(owner), owner, `owner '${ownerKey(owner)}'`);
+    }
+    for (const field of descriptor.fields) {
+        yield* catalogOfIdentity(field.id, target, "field");
+        if (isBlank(field.id.localName))
+            return yield* invalid("blank field local name");
+        if (isBlank(field.id.owner.name))
+            return yield* invalid("blank field owner name");
+        if (!owners.has(ownerKey(field.id.owner))) {
+            return yield* invalid(`missing owner ${field.id.owner.kind} '${field.id.owner.name}' for field '${field.id.localName}'`);
+        }
+        yield* intern(fields, fieldKey(field.id.owner, field.id.localName), field.id, `field identity '${field.id.owner.kind}:${field.id.owner.name}.${field.id.localName}'`);
+        pushIndex(fieldsByOwnerName, ownerNameLocalKey(field.id.owner.name, field.id.localName), field.id);
+        if (field.valueType === "ref") {
+            yield* validateRefTarget(field.refTarget, target, entities, traits, "field ref target");
+        }
+    }
+    for (const operation of descriptor.operations) {
+        yield* catalogOfIdentity(operation.id, target, "operation");
+        if (isBlank(operation.id.localName))
+            return yield* invalid("blank operation local name");
+        if (isBlank(operation.id.owner.name))
+            return yield* invalid("blank operation owner name");
+        if (!owners.has(ownerKey(operation.id.owner))) {
+            return yield* invalid(`missing owner ${operation.id.owner.kind} '${operation.id.owner.name}' for operation '${operation.id.localName}'`);
+        }
+        yield* intern(operations, operationKey(operation.id.owner, operation.id.localName, operation.id.target), operation.id, `operation identity '${operation.id.owner.kind}:${operation.id.owner.name}.${operation.id.localName}:${operation.id.target}'`);
+        yield* validateInputShape(operation.input, target, entities, traits);
+    }
+    for (const entity of descriptor.entities) {
+        for (const trait of entity.traits) {
+            yield* catalogOfIdentity(trait, target, "entity trait");
+            if (!traits.has(trait.name)) {
+                return yield* invalid(`missing trait '${trait.name}' composed by entity '${entity.id.name}'`);
+            }
+        }
+    }
+    for (const trait of descriptor.traits) {
+        for (const composed of trait.traits) {
+            yield* catalogOfIdentity(composed, target, "trait composition");
+            if (!traits.has(composed.name)) {
+                return yield* invalid(`missing trait '${composed.name}' composed by trait '${trait.id.name}'`);
+            }
+        }
+    }
+    for (const row of descriptor.traitComposition) {
+        yield* catalogOfIdentity(row.composer, target, "trait-composition composer");
+        yield* catalogOfIdentity(row.trait, target, "trait-composition trait");
+        if (!entities.has(row.composer.name)) {
+            return yield* invalid(`missing composer entity '${row.composer.name}'`);
+        }
+        if (!traits.has(row.trait.name)) {
+            return yield* invalid(`missing composed trait '${row.trait.name}'`);
+        }
+        for (const transitive of row.transitive) {
+            yield* catalogOfIdentity(transitive, target, "trait-composition transitive");
+            if (!traits.has(transitive.name)) {
+                return yield* invalid(`missing transitive trait '${transitive.name}'`);
+            }
+        }
+    }
+    return {
+        target,
+        entities,
+        traits,
+        fields,
+        operations,
+        owners,
+        fieldsByOwnerName,
+    };
+});
+const validateRefTarget = (refTarget, target, entities, traits, label) => Result.gen(function* () {
+    if (refTarget === undefined || refTarget._tag === "self" || refTarget._tag === "untargeted") {
+        return;
+    }
+    if (refTarget._tag === "entity") {
+        yield* catalogOfIdentity(refTarget.entity, target, label);
+        if (!entities.has(refTarget.entity.name)) {
+            return yield* invalid(`missing ${label} entity '${refTarget.entity.name}'`);
+        }
+        return;
+    }
+    yield* catalogOfIdentity(refTarget.trait, target, label);
+    if (!traits.has(refTarget.trait.name)) {
+        return yield* invalid(`missing ${label} trait '${refTarget.trait.name}'`);
+    }
+});
+const validateInputShape = (shape, target, entities, traits) => {
+    switch (shape._tag) {
+        case "scalar":
+        case "opaque":
+            return Result.succeed(undefined);
+        case "ref":
+            return validateRefTarget(shape.refTarget, target, entities, traits, "operation input ref target");
+        case "array":
+            return validateInputShape(shape.items, target, entities, traits);
+        case "struct":
+            return Result.gen(function* () {
+                for (const field of shape.fields) {
+                    yield* validateInputShape(field.shape, target, entities, traits);
+                }
+            });
+    }
+};
+const bindEntity = (index, relative) => {
+    if (isBlank(relative.name))
+        return invalid("blank entity name");
+    const bound = index.entities.get(relative.name);
+    if (bound === undefined) {
+        return invalid(`missing entity '${relative.name}'`);
+    }
+    return Result.succeed(bound);
+};
+const bindTrait = (index, relative) => {
+    if (isBlank(relative.name))
+        return invalid("blank trait name");
+    const bound = index.traits.get(relative.name);
+    if (bound === undefined) {
+        return invalid(`missing trait '${relative.name}'`);
+    }
+    return Result.succeed(bound);
+};
+const bindField = (index, relative) => {
+    if (isBlank(relative.localName))
+        return invalid("blank field local name");
+    if (isBlank(relative.owner.name))
+        return invalid("blank field owner name");
+    const exact = index.fields.get(fieldKey(relative.owner, relative.localName));
+    if (exact !== undefined)
+        return Result.succeed(exact);
+    const sameName = index.fieldsByOwnerName.get(ownerNameLocalKey(relative.owner.name, relative.localName));
+    if (sameName !== undefined) {
+        const otherKind = sameName.find((field) => field.owner.kind !== relative.owner.kind);
+        if (otherKind !== undefined) {
+            return invalid(`wrong owner kind for field '${relative.owner.name}.${relative.localName}': expected ${relative.owner.kind}`);
+        }
+    }
+    if (!index.owners.has(ownerKey(relative.owner))) {
+        const swapped = { kind: otherOwnerKind(relative.owner.kind), name: relative.owner.name };
+        if (index.owners.has(ownerKey(swapped))) {
+            return invalid(`wrong owner kind for field '${relative.owner.name}.${relative.localName}': expected ${relative.owner.kind}`);
+        }
+        return invalid(`missing owner ${relative.owner.kind} '${relative.owner.name}' for field '${relative.localName}'`);
+    }
+    return invalid(`wrong local name for field '${relative.owner.kind}:${relative.owner.name}.${relative.localName}'`);
+};
+const bindOperation = (index, relative) => {
+    if (isBlank(relative.localName))
+        return invalid("blank operation local name");
+    if (isBlank(relative.owner.name))
+        return invalid("blank operation owner name");
+    const exact = index.operations.get(operationKey(relative.owner, relative.localName, relative.target));
+    if (exact !== undefined)
+        return Result.succeed(exact);
+    if (!index.owners.has(ownerKey(relative.owner))) {
+        const swapped = { kind: otherOwnerKind(relative.owner.kind), name: relative.owner.name };
+        if (index.owners.has(ownerKey(swapped))) {
+            return invalid(`wrong owner kind for operation '${relative.owner.name}.${relative.localName}': expected ${relative.owner.kind}`);
+        }
+        return invalid(`missing owner ${relative.owner.kind} '${relative.owner.name}' for operation '${relative.localName}'`);
+    }
+    return invalid(`missing operation '${relative.owner.kind}:${relative.owner.name}.${relative.localName}:${relative.target}'`);
+};
+const bindFocus = (index, focus) => Result.gen(function* () {
+    switch (focus._tag) {
+        case "entity": {
+            const entity = yield* bindEntity(index, focus.entity);
+            return { _tag: "entity", entity };
+        }
+        case "trait": {
+            const trait = yield* bindTrait(index, focus.trait);
+            return { _tag: "trait", trait };
+        }
+        case "field": {
+            const field = yield* bindField(index, focus.field);
+            return { _tag: "field", field };
+        }
+        case "operation": {
+            const operation = yield* bindOperation(index, focus.operation);
+            return { _tag: "operation", operation };
+        }
+    }
+});
+const bindRefTerm = (index, term) => Result.gen(function* () {
+    const steps = [];
+    for (const step of term.steps) {
+        const field = yield* bindField(index, step.field);
+        steps.push({ field });
+    }
+    return { _tag: "ref", root: term.root, steps };
+});
+const bindValueTerm = (index, term) => {
+    switch (term._tag) {
+        case "ref":
+            return bindRefTerm(index, term);
+        case "lit":
+        case "subject":
+        case "me":
+        case "claim":
+            return Result.succeed(term);
+    }
+};
+const bindExpr = (index, expr) => {
+    switch (expr._tag) {
+        case "const":
+        case "hasClass":
+            return Result.succeed(expr);
+        case "and":
+        case "or":
+            return Result.gen(function* () {
+                const exprs = yield* Result.all(expr.exprs.map((child) => bindExpr(index, child)));
+                return { _tag: expr._tag, exprs };
+            });
+        case "not":
+            return Result.gen(function* () {
+                const child = yield* bindExpr(index, expr.expr);
+                return { _tag: "not", expr: child };
+            });
+        case "eq":
+            return Result.gen(function* () {
+                const left = yield* bindValueTerm(index, expr.left);
+                const right = yield* bindValueTerm(index, expr.right);
+                return { _tag: "eq", left, right };
+            });
+        case "has":
+            return Result.gen(function* () {
+                const term = yield* bindValueTerm(index, expr.term);
+                return { _tag: "has", term };
+            });
+        case "in":
+            return Result.gen(function* () {
+                const value = yield* bindValueTerm(index, expr.value);
+                const collection = yield* bindValueTerm(index, expr.collection);
+                return { _tag: "in", value, collection };
+            });
+    }
+};
+const bindRule = (index, rule) => Result.gen(function* () {
+    const focus = yield* bindFocus(index, rule.focus);
+    const expr = yield* bindExpr(index, rule.expr);
+    const bound = {
+        id: rule.id,
+        focus,
+        expr,
+        usesResource: rule.usesResource,
+        usesMe: rule.usesMe,
+        usesSubject: rule.usesSubject,
+        traversalDepth: rule.traversalDepth,
+    };
+    const material = yield* canonicalAuthorizationRuleMaterial(bound);
+    return { rule: bound, material };
+});
+const remapRuleIds = (ids, map) => ids.map((id) => map.get(id) ?? id);
+const remapDecision = (decision, map) => ({
+    allow: remapRuleIds(decision.allow, map),
+    deny: remapRuleIds(decision.deny, map),
+});
+const remapDecisionEntries = (entries, map) => entries.map((entry) => ({ ...entry, decision: remapDecision(entry.decision, map) }));
+const bindDecisionEntries = (entries, bindTarget) => Result.gen(function* () {
+    const bound = [];
+    const seen = new Set();
+    for (const entry of entries) {
+        const target = yield* bindTarget(entry.target);
+        if (seen.has(target)) {
+            return yield* invalid("ambiguous bound decision target");
+        }
+        seen.add(target);
+        bound.push({ target, decision: entry.decision });
+    }
+    return bound;
+});
+const bindDecisions = (index, decisions) => Result.gen(function* () {
+    const entities = yield* bindDecisionEntries(decisions.entities, (target) => bindEntity(index, target));
+    const traits = yield* bindDecisionEntries(decisions.traits, (target) => bindTrait(index, target));
+    const fields = yield* bindDecisionEntries(decisions.fields, (target) => bindField(index, target));
+    const operations = yield* bindDecisionEntries(decisions.operations, (target) => bindOperation(index, target));
+    return { entities, traits, fields, operations };
+});
+const bindPrincipal = (index, principal) => Result.gen(function* () {
+    if (principal.entity === undefined) {
+        return { subjectClaim: principal.subjectClaim };
+    }
+    const entity = yield* bindField(index, principal.entity);
+    return { subjectClaim: principal.subjectClaim, entity };
+});
+const clonePlain = (value) => {
+    if (value === null || typeof value !== "object")
+        return value;
+    if (Array.isArray(value)) {
+        return value.map((item) => clonePlain(item));
+    }
+    const copy = {};
+    for (const key of Object.keys(value)) {
+        copy[key] = clonePlain(value[key]);
+    }
+    return copy;
+};
+const freezePlain = (value) => {
+    if (value === null || typeof value !== "object" || Object.isFrozen(value)) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        for (const item of value)
+            freezePlain(item);
+    }
+    else {
+        for (const key of Object.keys(value)) {
+            freezePlain(value[key]);
+        }
+    }
+    return Object.freeze(value);
+};
+const freezeBound = (value) => freezePlain(clonePlain(value));
+export const bindPolicyTemplateResult = (input) => Result.gen(function* () {
+    const index = yield* indexCatalog(input.target, input.descriptor);
+    const principal = yield* bindPrincipal(index, input.template.principal);
+    const boundRules = yield* Result.all(input.template.rules.map((rule) => bindRule(index, rule)));
+    const seen = new Map();
+    const rules = [];
+    for (let i = 0; i < input.template.rules.length; i++) {
+        const source = input.template.rules[i].id;
+        const { rule, material } = boundRules[i];
+        const existing = seen.get(source);
+        if (existing !== undefined) {
+            return yield* invalid(existing === material
+                ? `duplicate source rule id '${source}'`
+                : `colliding source rule id '${source}'`);
+        }
+        seen.set(source, material);
+        rules.push(rule);
+    }
+    const decisions = yield* bindDecisions(index, input.template.decisions);
+    return freezeBound({
+        _tag: "BoundAuthorizationIR",
+        version: BOUND_AUTHORIZATION_IR_VERSION,
+        languageVersion: AUTHORIZATION_LANGUAGE_VERSION,
+        database: input.target.database,
+        catalog: input.target.catalog,
+        catalogVersion: input.target.catalogVersion,
+        schemaFingerprint: input.target.schemaFingerprint,
+        classes: input.template.classes,
+        claims: input.template.claims,
+        principal,
+        rules,
+        decisions,
+    });
+});
+const restampBoundRuleIds = Effect.fn("Authorization.restampBoundRuleIds")(function* (bound) {
+    const idMap = new Map();
+    const rules = [];
+    for (const rule of bound.rules) {
+        const id = yield* hashCanonicalRule(rule);
+        idMap.set(rule.id, id);
+        rules.push({ ...rule, id });
+    }
+    return freezeBound({
+        ...bound,
+        rules,
+        decisions: {
+            entities: remapDecisionEntries(bound.decisions.entities, idMap),
+            traits: remapDecisionEntries(bound.decisions.traits, idMap),
+            fields: remapDecisionEntries(bound.decisions.fields, idMap),
+            operations: remapDecisionEntries(bound.decisions.operations, idMap),
+        },
+    });
+});
+export const bindPolicyTemplate = Effect.fn("Authorization.bindPolicyTemplate")(function* (input) {
+    const bound = yield* Effect.fromResult(bindPolicyTemplateResult(input));
+    return yield* restampBoundRuleIds(bound);
+});
+export class AuthoritativeCatalog extends Context.Service()("ramose/authorization/AuthoritativeCatalog") {
+}
+export const bindAgainstAuthoritativeCatalog = Effect.fn("Authorization.bindAgainstAuthoritativeCatalog")(function* (target, template) {
+    const catalogs = yield* AuthoritativeCatalog;
+    const descriptor = yield* catalogs.resolve(target);
+    return yield* bindPolicyTemplate({ target, descriptor, template });
+});
+//# sourceMappingURL=bind.js.map

package/dist/internal/authorization/bind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind.js","sourceRoot":"","sources":["../../../src/internal/authorization/bind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAe3D,OAAO,EACL,8BAA8B,GAW/B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAS9D,OAAO,EAAE,kCAAkC,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKpF,MAAM,SAAS,GAAG,QAAQ,CAAC;AAE3B,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;AAEvF,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAE,SAAiB,EAAU,EAAE,CAC9D,GAAG,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;AAEnE,MAAM,YAAY,GAAG,CAAC,KAAe,EAAE,SAAiB,EAAE,MAAuB,EAAU,EAAE,CAC3F,GAAG,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;AAExF,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAU,EAAE,CACpE,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;AAEpC,MAAM,cAAc,GAAG,CAAC,IAAe,EAAa,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAYhG,MAAM,OAAO,GAAG,CAAC,OAAe,EAAqC,EAAE,CACrE,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAE1C,MAAM,QAAQ,GAAG,CACf,MAAwD,EACrB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AAEjF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;AAE/D,MAAM,eAAe,GAAG,CACtB,KAAa,EACb,KAAa,EACuB,EAAE,CACtC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,SAAS,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEnF,MAAM,MAAM,GAAG,CACb,GAAc,EACd,GAAM,EACN,KAAQ,EACR,KAAa,EACqB,EAAE;IACpC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAO,GAAgB,EAAE,GAAM,EAAE,KAAQ,EAAQ,EAAE;IACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;QAC7C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,QAAsC,EACtC,QAA8B,EAC9B,KAAa,EACqB,EAAE;IACpC,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC;YACd,OAAO,EAAE,iBAAiB,KAAK,EAAE;YACjC,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,MAAM,EAAE,QAAQ,CAAC,OAAkC;SACpD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,MAA4B,EAC5B,UAA6B,EACK,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAChB,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC;QAC7C,eAAe,CAAC,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC;QACzD,eAAe,CAAC,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;QAC/D,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,qBAAqB,CAAC;QAC3D,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,uBAAuB,CAAC;QACvD,eAAe,CAAC,UAAU,CAAC,OAAO,EAAE,4BAA4B,CAAC;QACjE,eAAe,CAAC,UAAU,CAAC,WAAW,EAAE,+BAA+B,CAAC;KACzE,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC;YACrB,OAAO,EAAE,wBAAwB;YACjC,gBAAgB,EAAE,MAAM,CAAC,QAAQ;YACjC,cAAc,EAAE,UAAU,CAAC,QAAQ;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,EAAE,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC;YACrB,OAAO,EAAE,0BAA0B;YACnC,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,MAAM,EAAE,UAAU,CAAC,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC;YACrB,OAAO,EAAE,uBAAuB;YAChC,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,MAAM,EAAE,UAAU,CAAC,EAAE;YACrB,eAAe,EAAE,MAAM,CAAC,cAAc;YACtC,aAAa,EAAE,UAAU,CAAC,OAAO;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC;YACrB,OAAO,EAAE,6BAA6B;YACtC,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,MAAM,EAAE,UAAU,CAAC,EAAE;YACrB,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;YAC7C,iBAAiB,EAAE,UAAU,CAAC,WAAW;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,MAA4B,EAC5B,UAA6B,EACa,EAAE,CAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEvD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACxE,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,oBAAoB,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACjE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,UAAU,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACtE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,mBAAmB,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;QACpF,MAAM,KAAK,GAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC/D,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,UAAU,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACjF,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,iBAAiB,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC,SAAS,GAAG,CAClG,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CACX,MAAM,EACN,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAC5C,KAAK,CAAC,EAAE,EACR,mBAAmB,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,SAAS,GAAG,CACvF,CAAC;QACF,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACnG,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC9B,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9C,KAAK,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,iBAAiB,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,oBAAoB,SAAS,CAAC,EAAE,CAAC,SAAS,GAAG,CAClH,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CACX,UAAU,EACV,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,EAC7E,SAAS,CAAC,EAAE,EACZ,uBAAuB,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,GAAG,CAC9H,CAAC;QACF,KAAK,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,kBAAkB,KAAK,CAAC,IAAI,yBAAyB,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,KAAK,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,kBAAkB,QAAQ,CAAC,IAAI,wBAAwB,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC9C,KAAK,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;QAC7E,KAAK,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,2BAA2B,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACxC,KAAK,CAAC,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,8BAA8B,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,6BAA6B,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ;QACR,MAAM;QACN,MAAM;QACN,UAAU;QACV,MAAM;QACN,iBAAiB;KAClB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,CACxB,SAAqC,EACrC,MAA4B,EAC5B,QAAuC,EACvC,MAAoC,EACpC,KAAa,EACqB,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC5F,OAAO;IACT,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChC,KAAK,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,KAAK,YAAY,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO;IACT,CAAC;IACD,KAAK,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,KAA0B,EAC1B,MAA4B,EAC5B,QAAuC,EACvC,MAAoC,EACF,EAAE;IACpC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;QACpG,KAAK,OAAO;YACV,OAAO,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnE,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjC,KAAK,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,KAAmB,EACnB,QAA0B,EACY,EAAE;IACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,mBAAmB,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,KAAmB,EACnB,QAAyB,EACY,EAAE;IACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,kBAAkB,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,KAAmB,EACnB,QAAyB,EACY,EAAE;IACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAC1C,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAC3D,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,OAAO,CACZ,+BAA+B,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,eAAe,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAa,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnG,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO,OAAO,CACZ,+BAA+B,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,eAAe,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAC7G,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CACZ,iBAAiB,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,gBAAgB,QAAQ,CAAC,SAAS,GAAG,CAClG,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CACZ,+BAA+B,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,GAAG,CACnG,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,KAAmB,EACnB,QAA6B,EACY,EAAE;IAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAChC,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAClE,CAAC;IACF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAa,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnG,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO,OAAO,CACZ,mCAAmC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,eAAe,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CACjH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CACZ,iBAAiB,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,oBAAoB,QAAQ,CAAC,SAAS,GAAG,CACtG,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CACZ,sBAAsB,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAC7G,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,KAAmB,EACnB,KAAwB,EACwB,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,KAAK,WAAW,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,WAAoB,EAAE,SAAS,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAClB,KAAmB,EACnB,IAAqB,EACyB,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAc,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CACpB,KAAmB,EACnB,IAAuB,EACyB,EAAE;IAClD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAClC,KAAK,KAAK,CAAC;QACX,KAAK,SAAS,CAAC;QACf,KAAK,IAAI,CAAC;QACV,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CACf,KAAmB,EACnB,IAA+B,EACyB,EAAE;IAC1D,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO,CAAC;QACb,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,KAAK,KAAK,CAAC;QACX,KAAK,IAAI;YACP,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACpC,CAAC,CAAC,CAAC;QACL,KAAK,KAAK;YACR,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChD,OAAO,EAAE,IAAI,EAAE,KAAc,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,KAAK,IAAI;YACP,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtD,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,KAAK,KAAK;YACR,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpD,OAAO,EAAE,IAAI,EAAE,KAAc,EAAE,IAAI,EAAE,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,KAAK,IAAI;YACP,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACpD,CAAC,CAAC,CAAC;IACP,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CACf,KAAmB,EACnB,IAA+B,EACuE,EAAE,CACxG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAA+B;QACxC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK;QACL,IAAI;QACJ,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,GAA0B,EAC1B,GAAgC,EACT,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAE/D,MAAM,aAAa,GAAG,CACpB,QAAkB,EAClB,GAAgC,EACtB,EAAE,CAAC,CAAC;IACd,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC;IACxC,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAC3B,OAAgF,EAChF,GAAgC,EACyC,EAAE,CAC3E,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAEvF,MAAM,mBAAmB,GAAG,CAC1B,OAAkF,EAClF,UAAuE,EAIvE,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAkE,EAAE,CAAC;IAChF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CACpB,KAAmB,EACnB,SAAyC,EACoB,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CACzE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAC1B,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAC7E,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAC7B,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAClD,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CACpB,KAAmB,EACnB,SAAoC,EACsB,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,CAAI,KAAQ,EAAK,EAAE;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAM,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAI,KAAQ,EAAK,EAAE;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,WAAW,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,KAA0B,EAC4B,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAEhG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,KAAK,GAAiC,EAAE,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QAC3C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,QAAQ,KAAK,QAAQ;gBACnB,CAAC,CAAC,6BAA6B,MAAM,GAAG;gBACxC,CAAC,CAAC,6BAA6B,MAAM,GAAG,CAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,sBAA+B;QACrC,OAAO,EAAE,8BAA8B;QACvC,eAAe,EAAE,8BAA8B;QAC/C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;QAC/B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;QAC3C,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB;QACjD,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;QAC/B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,SAAS;QACT,KAAK;QACL,SAAS;KACV,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC,EAClF,KAA+B;IAE/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,KAAK,GAAiC,EAAE,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,WAAW,CAAC;QACjB,GAAG,KAAK;QACR,KAAK;QACL,SAAS,EAAE;YACT,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;YAC/D,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;YAC3D,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;YAC3D,UAAU,EAAE,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC;SACpE;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EACvF,KAA0B;IAE1B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAQH,MAAM,OAAO,oBAAqB,SAAQ,OAAO,CAAC,OAAO,EAGtD,CAAC,2CAA2C,CAAC;CAAG;AAEnD,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,EAAE,CACtD,+CAA+C,CAChD,CAAC,QAAQ,CAAC,EAAE,MAA4B,EAAE,QAAyC;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC"}

package/dist/internal/authorization/bounds.d.ts

@@ -0,0 +1,13 @@
+export declare const MAX_TRAVERSAL_DEPTH = 3;
+export declare const DEFAULT_AUTHORIZATION_BUDGET = 10000;
+export declare const MAX_READ_LEASE_MS = 5000;
+export declare const MAX_JSON_DEPTH = 64;
+export declare const MAX_COLLECTION_SIZE = 1024;
+export declare const MAX_STRING_LENGTH = 4096;
+export declare const MAX_JSON_NODES = 4096;
+export declare const MAX_JSON_ENCODED_BYTES = 65536;
+export type AuthorizationBudget = {
+    readonly limit: number;
+    readonly spent: number;
+};
+//# sourceMappingURL=bounds.d.ts.map

package/dist/internal/authorization/bounds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounds.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/bounds.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD,eAAO,MAAM,iBAAiB,OAAQ,CAAC;AAEvC,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AAEzC,eAAO,MAAM,iBAAiB,OAAQ,CAAC;AAEvC,eAAO,MAAM,cAAc,OAAQ,CAAC;AAEpC,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC"}

package/dist/internal/authorization/bounds.js

@@ -0,0 +1,9 @@
+export const MAX_TRAVERSAL_DEPTH = 3;
+export const DEFAULT_AUTHORIZATION_BUDGET = 10_000;
+export const MAX_READ_LEASE_MS = 5_000;
+export const MAX_JSON_DEPTH = 64;
+export const MAX_COLLECTION_SIZE = 1_024;
+export const MAX_STRING_LENGTH = 4_096;
+export const MAX_JSON_NODES = 4_096;
+export const MAX_JSON_ENCODED_BYTES = 65_536;
+//# sourceMappingURL=bounds.js.map

package/dist/internal/authorization/bounds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounds.js","sourceRoot":"","sources":["../../../src/internal/authorization/bounds.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC"}

package/dist/internal/authorization/canonical-json.d.ts

@@ -0,0 +1,6 @@
+import type { JsonValue } from "./json.ts";
+export declare const AUTHORIZATION_CANONICAL_JSON_VERSION: "rfc8785-jcs/1";
+export declare const compareCanonicalKeys: (left: string, right: string) => number;
+export declare const hasLoneSurrogate: (value: string) => boolean;
+export declare const canonicalizeJson: (json: JsonValue) => string;
+//# sourceMappingURL=canonical-json.d.ts.map

package/dist/internal/authorization/canonical-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/canonical-json.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,eAAO,MAAM,oCAAoC,EAAG,eAAwB,CAAC;AAE7E,eAAO,MAAM,oBAAoB,SAAU,MAAM,SAAS,MAAM,KAAG,MACzB,CAAC;AAE3C,eAAO,MAAM,gBAAgB,UAAW,MAAM,KAAG,OAYhD,CAAC;AA6CF,eAAO,MAAM,gBAAgB,SAAU,SAAS,KAAG,MAA4B,CAAC"}

package/dist/internal/authorization/canonical-json.js

@@ -0,0 +1,65 @@
+export const AUTHORIZATION_CANONICAL_JSON_VERSION = "rfc8785-jcs/1";
+export const compareCanonicalKeys = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+export const hasLoneSurrogate = (value) => {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code >= 0xd800 && code <= 0xdbff) {
+            const next = value.charCodeAt(i + 1);
+            if (!(next >= 0xdc00 && next <= 0xdfff))
+                return true;
+            i += 1;
+            continue;
+        }
+        if (code >= 0xdc00 && code <= 0xdfff)
+            return true;
+    }
+    return false;
+};
+const escapeRfc8785String = (value) => {
+    if (hasLoneSurrogate(value)) {
+        throw new TypeError("ramose/authorization: canonicalizeJson rejects lone surrogates");
+    }
+    return JSON.stringify(value);
+};
+const serializeRfc8785Number = (value) => {
+    if (Object.is(value, -0) || value === 0)
+        return "0";
+    return String(value);
+};
+const ownJson = (value, key) => {
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    if (descriptor === undefined || descriptor.get !== undefined || descriptor.set !== undefined) {
+        throw new TypeError("ramose/authorization: canonicalizeJson expects own JSON data");
+    }
+    return descriptor.value;
+};
+const writeRfc8785 = (value) => {
+    if (value === null)
+        return "null";
+    if (typeof value === "boolean")
+        return value ? "true" : "false";
+    if (typeof value === "number")
+        return serializeRfc8785Number(value);
+    if (typeof value === "string")
+        return escapeRfc8785String(value);
+    if (Array.isArray(value)) {
+        let out = "[";
+        for (let i = 0; i < value.length; i++) {
+            if (i > 0)
+                out += ",";
+            out += writeRfc8785(value[i]);
+        }
+        return `${out}]`;
+    }
+    const keys = Object.keys(value).sort(compareCanonicalKeys);
+    let out = "{";
+    for (let i = 0; i < keys.length; i++) {
+        if (i > 0)
+            out += ",";
+        const key = keys[i];
+        out += `${escapeRfc8785String(key)}:${writeRfc8785(ownJson(value, key))}`;
+    }
+    return `${out}}`;
+};
+export const canonicalizeJson = (json) => writeRfc8785(json);
+//# sourceMappingURL=canonical-json.js.map

package/dist/internal/authorization/canonical-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../../src/internal/authorization/canonical-json.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oCAAoC,GAAG,eAAwB,CAAC;AAE7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAC1E,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAW,EAAE;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAU,EAAE;IACpD,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,KAAa,EAAU,EAAE;IACvD,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACpD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,GAAW,EAAa,EAAE;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7F,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,UAAU,CAAC,KAAkB,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAU,EAAE;IAChD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,GAAG,GAAG,GAAG,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC;gBAAE,GAAG,IAAI,GAAG,CAAC;YACtB,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAc,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC3D,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,IAAI,GAAG,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,GAAG,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAe,EAAU,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC"}