tapimo 0.0.0 → 0.0.2

package/dist/internal/Auth.js

@@ -0,0 +1,618 @@
+import { createMiddleware } from 'hono/factory';
+import { matchedRoutes } from 'hono/route';
+import { findTargetHandler } from 'hono/utils/handler';
+import { Credential } from 'mppx';
+import { Mppx, tempo } from 'mppx/hono';
+import * as ApiKeySource from '../ApiKeySource.js';
+import * as ApiKey from '../ApiKey.js';
+import * as OpenApi from './OpenApi.js';
+import * as RateLimit from './RateLimit.js';
+import * as Response from './Response.js';
+import * as Schema from './Schema.js';
+import * as Scope from '../Scope.js';
+import * as Viem from './Viem.js';
+const policySymbol = Symbol('tempo-api.auth.policy');
+/** Reads the authenticated principal from a Hono context. */
+export function getPrincipal(c) {
+    return c.get('principal') ?? null;
+}
+/**
+ * Always false at runtime, but typed as `boolean` so handlers can include a
+ * never-reached access-error branch in Hono's inferred response union.
+ */
+export const narrowAccess = false;
+/** Typed auth/payment error response for Hono client inference. Never reached at runtime. */
+export function accessError(c) {
+    const status = Number(c.req.header('tempo-narrow-access-status'));
+    if (status === 400)
+        return Response.error(c, {
+            code: 'api_key_malformed',
+            message: 'Malformed API key',
+            status: 400,
+        });
+    if (status === 401) {
+        const code = c.req.header('tempo-narrow-access-code') === 'api_key_missing'
+            ? 'api_key_missing'
+            : 'api_key_invalid';
+        return Response.error(c, {
+            code,
+            message: 'Missing or invalid API key',
+            status: 401,
+        });
+    }
+    if (status === 403)
+        return Response.error(c, {
+            code: 'api_key_forbidden',
+            message: 'API key missing required scope',
+            status: 403,
+        });
+    const code = c.req.header('tempo-narrow-access-code') === 'rate_limit_exceeded'
+        ? 'rate_limit_exceeded'
+        : 'payment_required';
+    return Response.error(c, {
+        code,
+        message: 'Payment required or rate limit exceeded',
+        status: 429,
+    });
+}
+/** Typed auth/payment error response for Hono client inference. Never reached at runtime. */
+export function paidAccessError(c) {
+    const status = Number(c.req.header('tempo-narrow-access-status'));
+    if (status !== 402)
+        return accessError(c);
+    // MPP owns the 402 challenge body and headers; it is intentionally not the
+    // API's JSON error envelope.
+    return c.body(null, 402);
+}
+/** Creates auth middleware for protected OpenAPI routes. */
+export function middleware(options) {
+    const { charge = {}, ...mpp } = options.mpp === false ? {} : (options.mpp ?? {});
+    const defaults = laneDefaults(options);
+    const base = basePolicy(options, defaults);
+    // Resolution is cached per isolate by default (positive 60s / negative 10s,
+    // keyed by token sha256 — see `ApiKeySource.cached`) so hot keys skip the
+    // backend read on the auth path of every request. Pass `apiKey.cache: false`
+    // when instant revocation matters more than the per-request read.
+    const source = (() => {
+        if (options.apiKey === false || !options.apiKey?.source)
+            return ApiKeySource.noop;
+        if (options.apiKey.cache === false)
+            return options.apiKey.source;
+        return ApiKeySource.cached(options.apiKey.source, options.apiKey.cache);
+    })();
+    const auth = {
+        ...(options.apiKey === false
+            ? {}
+            : {
+                apiKey: {
+                    ...(options.apiKey?.rateLimits ? { rateLimits: options.apiKey.rateLimits } : {}),
+                    source,
+                },
+            }),
+        ...(options.mpp === false
+            ? {}
+            : {
+                mpp: Mppx.create({
+                    ...mpp,
+                    methods: [tempo.charge({ amount: '0.001', ...charge })],
+                    secretKey: mpp.secretKey ?? crypto.randomUUID(),
+                }),
+            }),
+        rateLimit: RateLimit.memory(options.rateLimit),
+    };
+    return createMiddleware((c, next) => {
+        const route = openApiRoute(c);
+        if (!route)
+            return next();
+        const { key, description } = route;
+        const overrides = options.overrides;
+        const endpointPolicy = resolvePolicy(base, defaults, [...policies(c), overrides?.[key]], description);
+        if (!endpointPolicy)
+            return next();
+        c.set('auth', auth);
+        return require(endpointPolicy)(c, next);
+    });
+}
+/** Creates route middleware that contributes an auth policy override. */
+export function policy(options) {
+    const middleware = createMiddleware((_, next) => next());
+    middleware[policySymbol] = options;
+    return middleware;
+}
+function laneDefaults(options) {
+    const apiKey = options.apiKey === false ? undefined : options.apiKey;
+    const public_ = options.public === false ? undefined : options.public;
+    return {
+        apiKey: {
+            // `rateLimit` is intentionally omitted: `policy.apiKey.rateLimit` means an
+            // explicit per-route cap (precedence tier 2), not the config default. The
+            // config default (tier 5) lives on `auth.apiKey.rateLimits['*']` and is
+            // applied by `resolveApiKeyLimit` at consume time.
+            //
+            // Default-closed to a full-access key: a route that declares no scopes
+            // requires the `'*'` wildcard, so a narrowly-scoped key only reaches
+            // routes that explicitly grant its scope. Routes opt into specific
+            // catalog scopes via `Auth.policy`.
+            scopes: apiKey?.scopes ?? [Scope.wildcard],
+        },
+        mpp: { charge: {} },
+        public: { rateLimit: public_?.rateLimit ?? { perMinute: 60 } },
+    };
+}
+/**
+ * Base policy before route overrides. Default-closed except the API-key lane:
+ * a route that declares nothing is API-key-only, and must opt into the public
+ * and paid lanes explicitly. This makes a partial override fail safe — omitting
+ * a lane leaves it closed rather than silently inheriting open access.
+ */
+function basePolicy(options, defaults) {
+    return options.apiKey === false ? {} : { apiKey: defaults.apiKey };
+}
+function resolvePolicy(base, defaults, overrides, description) {
+    let apiKey = base.apiKey;
+    let mpp = base.mpp;
+    let public_ = base.public;
+    for (const override of overrides) {
+        if (override === false)
+            return undefined;
+        if (!override)
+            continue;
+        apiKey = resolveApiKeyLane(apiKey, override.apiKey, defaults.apiKey);
+        mpp = resolveMppLane(mpp, override.mpp, defaults.mpp);
+        public_ = resolvePublicLane(public_, override.public, defaults.public);
+    }
+    // The OpenAPI summary/description rides along as the payment-challenge
+    // description. It is metadata, not a policy override, so it only applies when
+    // the paid lane is actually enabled and has no explicit description already.
+    if (mpp && description !== undefined && mpp.charge.description === undefined)
+        mpp = { charge: { ...mpp.charge, description } };
+    if (!apiKey && !mpp && !public_)
+        return undefined;
+    return {
+        ...(apiKey ? { apiKey } : {}),
+        ...(mpp ? { mpp } : {}),
+        ...(public_ ? { public: public_ } : {}),
+    };
+}
+function resolveApiKeyLane(current, override, default_) {
+    if (override === undefined)
+        return current;
+    if (override === false)
+        return undefined;
+    if (override === true)
+        return current ?? default_;
+    const base = current ?? default_;
+    return {
+        rateLimit: override.rateLimit ?? base.rateLimit,
+        scopes: override.scopes ?? base.scopes,
+    };
+}
+function resolveMppLane(current, override, default_) {
+    if (override === undefined)
+        return current;
+    if (override === false)
+        return undefined;
+    if (override === true)
+        return current ?? default_;
+    const base = current ?? default_;
+    return { charge: { ...base.charge, ...override.charge } };
+}
+function resolvePublicLane(current, override, default_) {
+    if (override === undefined)
+        return current;
+    if (override === false)
+        return undefined;
+    if (override === true)
+        return current ?? default_;
+    const base = current ?? default_;
+    return { rateLimit: override.rateLimit ?? base.rateLimit };
+}
+function openApiRoute(c) {
+    const route = matchedRoutes(c)
+        .slice(c.req.routeIndex + 1)
+        .find((route) => !!openApiSpec(route));
+    if (!route)
+        return undefined;
+    const spec = openApiSpec(route);
+    if (!spec)
+        return undefined;
+    const description = typeof spec.summary === 'string' ? spec.summary : spec.description;
+    return {
+        key: endpointKey(c, route),
+        description: typeof description === 'string' ? description : undefined,
+    };
+}
+function policies(c) {
+    return matchedRoutes(c)
+        .slice(c.req.routeIndex + 1)
+        .map(policyFromRoute)
+        .filter((policy) => policy !== undefined);
+}
+function openApiSpec(route) {
+    const handler = findTargetHandler(route.handler);
+    const metadata = handler[OpenApi.uniqueSymbol];
+    if (!metadata || !('spec' in metadata))
+        return undefined;
+    return metadata.spec;
+}
+function policyFromRoute(route) {
+    const handler = findTargetHandler(route.handler);
+    return handler[policySymbol];
+}
+/**
+ * Maps each documented operation id to its resolved access lanes by reading the
+ * `policy` overrides co-located on the app's routes. This is the single source
+ * of truth for per-operation `security` and the `402` response in the generated
+ * OpenAPI document (see `App.create`): the API-key lane is default-on, and the
+ * public/MPP lanes apply only where a route opts in via {@link policy}.
+ */
+export function describeAccess(app) {
+    const groups = new Map();
+    for (const route of app.routes) {
+        const key = `${route.method} ${route.path}`;
+        const group = groups.get(key) ?? { overrides: [] };
+        const spec = openApiSpec(route);
+        if (typeof spec?.operationId === 'string')
+            group.operationId = spec.operationId;
+        const override = policyFromRoute(route);
+        if (override)
+            group.overrides.push(override);
+        groups.set(key, group);
+    }
+    const access = {};
+    for (const { operationId, overrides } of groups.values()) {
+        if (!operationId)
+            continue;
+        let apiKey = true;
+        let scopes = [];
+        let public_ = false;
+        let mpp = false;
+        for (const override of overrides) {
+            if (override.apiKey !== undefined)
+                apiKey = override.apiKey !== false;
+            if (override.apiKey && override.apiKey !== true && override.apiKey.scopes)
+                scopes = override.apiKey.scopes;
+            if (override.public !== undefined)
+                public_ = override.public !== false;
+            if (override.mpp !== undefined)
+                mpp = override.mpp !== false;
+        }
+        access[operationId] = { mpp, public: public_, scopes: apiKey ? scopes : [] };
+    }
+    return access;
+}
+function endpointKey(c, route) {
+    return `${route.method.toUpperCase()} ${stripBasePath(normalizeRoutePath(route.path), basePath(c))}`;
+}
+function normalizeRoutePath(path) {
+    // Hono stores regex-constrained params as `:name{...}`. Auth overrides use
+    // the stable public route shape, e.g. `GET /tokens/:symbol`.
+    return path
+        .split('/')
+        .map((segment) => {
+        if (!segment.startsWith(':'))
+            return segment;
+        const pattern = segment.indexOf('{');
+        return pattern === -1 ? segment : segment.slice(0, pattern);
+    })
+        .join('/');
+}
+function stripBasePath(path, basePath) {
+    if (!basePath || basePath === '/')
+        return path;
+    if (path === basePath)
+        return '/';
+    if (path.startsWith(`${basePath}/`))
+        return path.slice(basePath.length);
+    return path;
+}
+function basePath(c) {
+    const variables = c.var;
+    return typeof variables['basePath'] === 'string' ? variables['basePath'] : undefined;
+}
+/** Requires route access through API key, public quota, or MPP payment. */
+export function require(policy) {
+    return createMiddleware(async (c, next) => {
+        const auth = c.get('auth');
+        const credential = getApiKeyCredential(c);
+        // The deprecated `key` query param has now been consumed for auth. Strip it
+        // from the request URL so it never reaches a route's query validator —
+        // endpoint query schemas are `z.strictObject`, so an unexpected `key`
+        // param would otherwise fail validation with `query_invalid`, breaking the
+        // legacy `?key=...` lane on every strict-query endpoint.
+        stripLegacyAuthQuery(c);
+        if (credential === false)
+            return jsonError(c, {
+                code: 'api_key_malformed',
+                message: 'Malformed API key',
+                status: 400,
+            });
+        const hasPayment = hasPaymentCredential(c) && isPaymentEnabled(auth, policy);
+        if (credential) {
+            const apiKey = await auth.apiKey?.source.resolve(credential.token);
+            if (!apiKey)
+                return jsonError(c, {
+                    code: 'api_key_invalid',
+                    message: 'Invalid API key',
+                    status: 401,
+                });
+            // Sandbox keys are restricted to non-mainnet chains. An explicit
+            // `chainId` of mainnet makes the key unusable for this request, so it is
+            // ignored and the request falls through to the public policy below (as if
+            // no key were presented). A request that omits `chainId` is steered to
+            // testnet so a sandbox key still "just works" without passing `?chainId`.
+            const explicitChain = explicitChainId(c);
+            const sandboxOnMainnet = apiKey.environment === 'sandbox' &&
+                explicitChain !== undefined &&
+                Viem.isMainnet(explicitChain);
+            if (!sandboxOnMainnet) {
+                if (apiKey.environment === 'sandbox' &&
+                    explicitChain === undefined &&
+                    Viem.isMainnet(c.get('chainId') ?? Viem.defaultChainId))
+                    // `chainId` lives on the app's `Variables`, not the narrower auth
+                    // contract, so it is read/written through an untyped cast.
+                    c.set('chainId', Viem.chainId.testnet);
+                const principal = principalFromApiKey(apiKey);
+                c.set('principal', principal);
+                const missing = apiKey.scopes.includes(Scope.wildcard)
+                    ? []
+                    : (policy.apiKey?.scopes.filter((scope) => !apiKey.scopes.includes(scope)) ?? []);
+                if (missing.length > 0)
+                    return jsonError(c, {
+                        code: 'api_key_forbidden',
+                        message: 'API key missing required scope',
+                        status: 403,
+                    });
+                if (hasPayment)
+                    return requirePayment(c, next, {
+                        auth,
+                        payment: { reason: 'api_key_over_quota', type: 'mpp' },
+                        policy,
+                        principal,
+                    });
+                if (policy.apiKey) {
+                    // A route consumes exactly one quota bucket: its single required scope,
+                    // else `'*'` (zero scopes). Routes today require at most one scope; a
+                    // future multi-scope route buckets against its first scope.
+                    const scope = policy.apiKey.scopes[0] ?? Scope.wildcard;
+                    const limit = resolveApiKeyLimit({ apiKey, auth, policy: policy.apiKey, scope });
+                    const result = await consumeRateLimit(auth, {
+                        key: `api_key:${apiKey.id}:scope:${scope}`,
+                        limit,
+                    });
+                    if (result) {
+                        setRateLimitHeaders(c, result);
+                        // Surface the bucket so callers can correlate a 429 with the exhausted
+                        // quota. Set before the over-quota branch so it rides the 429 (an MPP
+                        // 402 challenge is owned by mppx and drops these headers — by design).
+                        c.header('RateLimit-Scope', scope);
+                    }
+                    if (result && !result.allowed)
+                        return requirePaymentOrRateLimit(c, next, {
+                            auth,
+                            payment: { reason: 'api_key_over_quota', type: 'mpp' },
+                            policy,
+                            principal,
+                            rateLimit: result,
+                        });
+                }
+                return next();
+            }
+        }
+        const publicPrincipal = principalFromPublic(c);
+        if (hasPayment) {
+            c.set('principal', publicPrincipal);
+            return requirePayment(c, next, {
+                auth,
+                payment: { reason: 'public_over_quota', type: 'mpp' },
+                policy,
+                principal: publicPrincipal,
+            });
+        }
+        const limit = policy.public?.rateLimit;
+        if (limit) {
+            const result = await consumeRateLimit(auth, {
+                key: `public:${publicPrincipal.id}`,
+                limit,
+            });
+            if (result)
+                setRateLimitHeaders(c, result);
+            if (!result || result.allowed) {
+                c.set('principal', publicPrincipal);
+                return next();
+            }
+            c.set('principal', publicPrincipal);
+            return requirePaymentOrRateLimit(c, next, {
+                auth,
+                payment: { reason: 'public_over_quota', type: 'mpp' },
+                policy,
+                principal: publicPrincipal,
+                rateLimit: result,
+            });
+        }
+        if (isPaymentEnabled(auth, policy)) {
+            c.set('principal', publicPrincipal);
+            return requirePayment(c, next, {
+                auth,
+                payment: { reason: 'public_over_quota', type: 'mpp' },
+                policy,
+                principal: publicPrincipal,
+            });
+        }
+        return jsonError(c, {
+            code: 'api_key_missing',
+            message: 'Missing API key',
+            status: 401,
+        });
+    });
+}
+function consumeRateLimit(auth, options) {
+    if (!auth.rateLimit)
+        return Promise.resolve(null);
+    // Fail open: a rate-limit store error (e.g. a lost Durable Object
+    // connection) degrades to unenforced quota instead of failing the request.
+    return auth.rateLimit.consume(options).catch((error) => {
+        console.error('[auth] rate-limit consume failed; failing open', error);
+        return null;
+    });
+}
+/**
+ * Resolves the rate limit for an API-key request against a quota bucket.
+ * Most-specific wins: a per-key per-scope grant is the only thing that pierces a
+ * route's protective cap; the per-key `'*'` default does not (so a premium key
+ * can't silently blow past an expensive endpoint's ceiling). Per-key values live
+ * in the optional {@link ApiKey.ApiKey.rateLimits} map and stay `undefined` until a
+ * record source populates them, so until then only tiers 2/4/5/6 apply.
+ */
+function resolveApiKeyLimit(options) {
+    const { apiKey, auth, policy, scope } = options;
+    return (apiKey.rateLimits?.[scope] ?? // 1. per-key, per-scope
+        policy?.rateLimit ?? // 2. route override (protective cap)
+        apiKey.rateLimits?.[Scope.wildcard] ?? // 3. per-key default
+        auth.apiKey?.rateLimits?.[scope] ?? // 4. config per-scope
+        auth.apiKey?.rateLimits?.[Scope.wildcard] ?? { perMinute: 100 } // 5. config default // 6. hardcoded fallback
+    );
+}
+function getApiKeyCredential(c) {
+    const header = c.req.header('tempo-api-key');
+    if (header)
+        return { token: header };
+    // `Authorization: Bearer` compatibility fallback. Must not consume or reject
+    // `Authorization: Payment` (MPP), which is a distinct credential — a request
+    // carrying only a payment scheme falls through to the deprecated lanes below
+    // (which find nothing) and resolves to no API-key credential.
+    const authorization = c.req.header('authorization');
+    if (authorization && !Credential.extractPaymentScheme(authorization)) {
+        const match = /^Bearer\s+(.+)$/i.exec(authorization);
+        if (!match?.[1])
+            return false;
+        return { token: match[1] };
+    }
+    // Deprecated fallbacks carried over from the v1 API so existing integrations
+    // keep authenticating: the `x-api-key` header and the `key` query parameter.
+    const legacyHeader = c.req.header('x-api-key');
+    if (legacyHeader)
+        return { token: legacyHeader };
+    const legacyQuery = c.req.query('key');
+    if (legacyQuery)
+        return { token: legacyQuery };
+    return null;
+}
+/**
+ * Remove the deprecated `key` auth query param from the request URL once it has
+ * been read for authentication. Route query schemas are strict
+ * (`z.strictObject`), so leaving `key` in the query string would make the
+ * downstream validator reject the request as `query_invalid`. Stripping it
+ * keeps the legacy `?key=...` auth lane working on strict-query endpoints
+ * (e.g. `GET /v1/tokens`).
+ */
+function stripLegacyAuthQuery(c) {
+    const url = new URL(c.req.url);
+    if (!url.searchParams.has('key'))
+        return;
+    url.searchParams.delete('key');
+    c.req.raw = new Request(url, c.req.raw);
+}
+/**
+ * Reads an explicit `chainId`/`chain_id` query parameter, normalized to a
+ * numeric chain id. Returns `undefined` when absent or malformed (a malformed
+ * value falls through to the route's own validation). Mirrors the resolution in
+ * `App.create`'s unsupported-chain guard.
+ */
+function explicitChainId(c) {
+    const raw = c.req.query('chainId') ?? c.req.query('chain_id');
+    if (raw === undefined)
+        return undefined;
+    const parsed = Schema.ChainId.safeParse(raw);
+    return parsed.success ? parsed.data : undefined;
+}
+function getRequestId(c) {
+    const variables = c.var;
+    return typeof variables['requestId'] === 'string' ? variables['requestId'] : undefined;
+}
+function hasPaymentCredential(c) {
+    const authorization = c.req.header('authorization');
+    if (!authorization)
+        return false;
+    return !!Credential.extractPaymentScheme(authorization);
+}
+function isPaymentEnabled(auth, policy) {
+    return !!auth.mpp && !!policy.mpp;
+}
+function jsonError(c, options) {
+    const requestId = getRequestId(c);
+    // Auth error envelopes embed per-request state and must not be cached.
+    c.header('Cache-Control', 'no-store');
+    c.set('errorCode', options.code);
+    return c.json({
+        error: {
+            code: options.code,
+            message: options.message,
+        },
+        ...(requestId === undefined ? {} : { requestId }),
+    }, options.status);
+}
+function payer(c) {
+    try {
+        return Credential.fromRequest(c.req.raw).source;
+    }
+    catch {
+        return undefined;
+    }
+}
+function principalFromApiKey(apiKey) {
+    return {
+        apiKey,
+        environment: apiKey.environment,
+        id: apiKey.id,
+        orgId: apiKey.orgId,
+        type: 'api_key',
+    };
+}
+function principalFromPublic(c) {
+    const forwarded = c.req.header('x-forwarded-for')?.split(',')[0]?.trim();
+    return {
+        id: c.req.header('cf-connecting-ip') ??
+            c.req.header('x-real-ip') ??
+            forwarded ??
+            c.req.header('x-test-client-ip') ??
+            'anonymous',
+        type: 'public',
+    };
+}
+async function requirePayment(c, next, options) {
+    const middleware = options.auth.mpp?.charge(options.policy.mpp?.charge ?? {});
+    if (!middleware)
+        return jsonError(c, {
+            code: 'payment_required',
+            message: 'Payment required',
+            status: 429,
+        });
+    return middleware(c, async () => {
+        const payer_ = payer(c);
+        c.set('principal', {
+            ...options.principal,
+            payment: {
+                ...options.payment,
+                ...(payer_ === undefined ? {} : { payer: payer_ }),
+            },
+        });
+        await next();
+    });
+}
+function requirePaymentOrRateLimit(c, next, options) {
+    if (isPaymentEnabled(options.auth, options.policy))
+        return requirePayment(c, next, options);
+    c.header('Retry-After', String(Math.max(options.rateLimit.reset - Math.ceil(Date.now() / 1_000), 1)));
+    return jsonError(c, {
+        code: 'rate_limit_exceeded',
+        message: 'Rate limit exceeded',
+        status: 429,
+    });
+}
+function setRateLimitHeaders(c, result) {
+    c.header('RateLimit-Limit', String(result.limit));
+    c.header('RateLimit-Remaining', String(result.remaining));
+    c.header('RateLimit-Reset', String(result.reset));
+}
+//# sourceMappingURL=Auth.js.map

package/dist/internal/Auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Auth.js","sourceRoot":"","sources":["../../src/internal/Auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,UAAU,EAAe,MAAM,MAAM,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAEvC,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AACtC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAA;AAwIpD,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAkC,CAA4B;IACxF,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAA;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAgB,CAAA;AAE5C,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,CAAe;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAA;IACjE,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;YACvB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,GAAG;SACZ,CAAC,CAAA;IACJ,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,GACR,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC,KAAK,iBAAiB;YAC5D,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,iBAAiB,CAAA;QACvB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;YACvB,IAAI;YACJ,OAAO,EAAE,4BAA4B;YACrC,MAAM,EAAE,GAAG;SACZ,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;YACvB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,gCAAgC;YACzC,MAAM,EAAE,GAAG;SACZ,CAAC,CAAA;IACJ,MAAM,IAAI,GACR,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC,KAAK,qBAAqB;QAChE,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,kBAAkB,CAAA;IACxB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI;QACJ,OAAO,EAAE,yCAAyC;QAClD,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,CAAe;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAA;IACjE,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;IACzC,2EAA2E;IAC3E,6BAA6B;IAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AAC1B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAGxB,OAAqC;IACrC,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IAChF,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC1C,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;QACnB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM;YAAE,OAAO,YAAY,CAAC,IAAI,CAAA;QACjF,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAA;QAChE,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACzE,CAAC,CAAC,EAAE,CAAA;IACJ,MAAM,IAAI,GAAY;QACpB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK;YAC1B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChF,MAAM;iBACP;aACF,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,KAAK;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;oBACf,GAAG,GAAG;oBACN,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;oBACvD,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE;iBAChD,CAAC;aACH,CAAC;QACN,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;KAC/C,CAAA;IAED,OAAO,gBAAgB,CAAc,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,EAAE,CAAA;QAEzB,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,KAAK,CAAA;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,SAEb,CAAA;QACb,MAAM,cAAc,GAAG,aAAa,CAClC,IAAI,EACJ,QAAQ,EACR,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,EAClC,WAAW,CACZ,CAAA;QACD,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,EAAE,CAAA;QAElC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnB,OAAO,OAAO,CAAc,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC;AAoDD,yEAAyE;AACzE,MAAM,UAAU,MAAM,CAAC,OAAuB;IAC5C,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAsC,CAAA;IAC7F,UAAU,CAAC,YAAY,CAAC,GAAG,OAAO,CAAA;IAClC,OAAO,UAAU,CAAA;AACnB,CAAC;AAqDD,SAAS,YAAY,CAAC,OAA2B;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAA;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAA;IACrE,OAAO;QACL,MAAM,EAAE;YACN,2EAA2E;YAC3E,0EAA0E;YAC1E,wEAAwE;YACxE,mDAAmD;YACnD,EAAE;YACF,uEAAuE;YACvE,qEAAqE;YACrE,mEAAmE;YACnE,oCAAoC;YACpC,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3C;QACD,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACnB,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE;KAC/D,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,OAA2B,EAAE,QAAsB;IACrE,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;AACpE,CAAC;AAED,SAAS,aAAa,CACpB,IAAoB,EACpB,QAAsB,EACtB,SAA0D,EAC1D,WAA+B;IAE/B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACxB,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IAClB,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAA;IAEzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,SAAS,CAAA;QACxC,IAAI,CAAC,QAAQ;YAAE,SAAQ;QACvB,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;QACpE,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;QACrD,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACxE,CAAC;IAED,uEAAuE;IACvE,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,GAAG,IAAI,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;QAC1E,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAA;IAElD,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IACjD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAiC,EACjC,QAAkC,EAClC,QAAgC;IAEhC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAA;IAC1C,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,IAAI,QAAQ,CAAA;IACjD,MAAM,IAAI,GAAG,OAAO,IAAI,QAAQ,CAAA;IAChC,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;QAC/C,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;KACvC,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CACrB,OAA8B,EAC9B,QAA+B,EAC/B,QAA6B;IAE7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAA;IAC1C,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,IAAI,QAAQ,CAAA;IACjD,MAAM,IAAI,GAAG,OAAO,IAAI,QAAQ,CAAA;IAChC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAA;AAC3D,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAiC,EACjC,QAAkC,EAClC,QAAgC;IAEhC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAA;IAC1C,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,IAAI,QAAQ,CAAA;IACjD,MAAM,IAAI,GAAG,OAAO,IAAI,QAAQ,CAAA;IAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,CAAe;IACnC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC;SAC3B,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;SAC3B,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAE5B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAE3B,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAA;IACtF,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC;QAC1B,WAAW,EAAE,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KACvE,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAe;IAC/B,OAAO,aAAa,CAAC,CAAC,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;SAC3B,GAAG,CAAC,eAAe,CAAC;SACpB,MAAM,CAAC,CAAC,MAAM,EAA4B,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB;IACrC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAA;IAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IACxD,OAAO,QAAQ,CAAC,IAAI,CAAA;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAA;IACjE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAA;AAC9B,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiE,CAAA;IACvF,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAA0C,CAAA;QACxE,IAAI,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ;YAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QAC/E,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,QAAQ;YAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IAED,MAAM,MAAM,GAAoC,EAAE,CAAA;IAClD,KAAK,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,WAAW;YAAE,SAAQ;QAC1B,IAAI,MAAM,GAAG,IAAI,CAAA;QACjB,IAAI,MAAM,GAAwB,EAAE,CAAA;QACpC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,GAAG,GAAG,KAAK,CAAA;QACf,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAA;YACrE,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM;gBACvE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAA;YACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAA;YACtE,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;gBAAE,GAAG,GAAG,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAA;QAC9D,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC9E,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,WAAW,CAAC,CAAe,EAAE,KAAkB;IACtD,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACtG,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,2EAA2E;IAC3E,6DAA6D;IAC7D,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAA;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpC,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,QAA4B;IAC/D,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IACjC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACvE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAe;IAC/B,MAAM,SAAS,GAAG,CAAC,CAAC,GAA8B,CAAA;IAClD,OAAO,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACtF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,OAAO,CACrB,MAAsB;IAEtB,OAAO,gBAAgB,CAAc,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACzC,4EAA4E;QAC5E,uEAAuE;QACvE,sEAAsE;QACtE,2EAA2E;QAC3E,yDAAyD;QACzD,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,UAAU,KAAK,KAAK;YACtB,OAAO,SAAS,CAAC,CAAC,EAAE;gBAClB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,mBAAmB;gBAC5B,MAAM,EAAE,GAAG;aACZ,CAAC,CAAA;QAEJ,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YAClE,IAAI,CAAC,MAAM;gBACT,OAAO,SAAS,CAAC,CAAC,EAAE;oBAClB,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,iBAAiB;oBAC1B,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;YAEJ,iEAAiE;YACjE,yEAAyE;YACzE,0EAA0E;YAC1E,uEAAuE;YACvE,0EAA0E;YAC1E,MAAM,aAAa,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,gBAAgB,GACpB,MAAM,CAAC,WAAW,KAAK,SAAS;gBAChC,aAAa,KAAK,SAAS;gBAC3B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAE/B,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,IACE,MAAM,CAAC,WAAW,KAAK,SAAS;oBAChC,aAAa,KAAK,SAAS;oBAC3B,IAAI,CAAC,SAAS,CAAE,CAAC,CAAC,GAAG,CAAC,SAAkB,CAAwB,IAAI,IAAI,CAAC,cAAc,CAAC;oBAExF,kEAAkE;oBAClE,2DAA2D;oBAC3D,CAAC,CAAC,GAAG,CAAC,SAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAgB,CAAC,CAAA;gBAE1D,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;gBAC7C,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;gBAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;oBACpD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;oBACpB,OAAO,SAAS,CAAC,CAAC,EAAE;wBAClB,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,gCAAgC;wBACzC,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAA;gBAEJ,IAAI,UAAU;oBACZ,OAAO,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE;wBAC7B,IAAI;wBACJ,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE;wBACtD,MAAM;wBACN,SAAS;qBACV,CAAC,CAAA;gBAEJ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,wEAAwE;oBACxE,sEAAsE;oBACtE,4DAA4D;oBAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAA;oBACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;oBAChF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE;wBAC1C,GAAG,EAAE,WAAW,MAAM,CAAC,EAAE,UAAU,KAAK,EAAE;wBAC1C,KAAK;qBACN,CAAC,CAAA;oBACF,IAAI,MAAM,EAAE,CAAC;wBACX,mBAAmB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;wBAC9B,uEAAuE;wBACvE,sEAAsE;wBACtE,uEAAuE;wBACvE,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;oBACpC,CAAC;oBACD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;wBAC3B,OAAO,yBAAyB,CAAC,CAAC,EAAE,IAAI,EAAE;4BACxC,IAAI;4BACJ,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE;4BACtD,MAAM;4BACN,SAAS;4BACT,SAAS,EAAE,MAAM;yBAClB,CAAC,CAAA;gBACN,CAAC;gBAED,OAAO,IAAI,EAAE,CAAA;YACf,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YACnC,OAAO,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE;gBAC7B,IAAI;gBACJ,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK,EAAE;gBACrD,MAAM;gBACN,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAA;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE;gBAC1C,GAAG,EAAE,UAAU,eAAe,CAAC,EAAE,EAAE;gBACnC,KAAK;aACN,CAAC,CAAA;YACF,IAAI,MAAM;gBAAE,mBAAmB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;gBACnC,OAAO,IAAI,EAAE,CAAA;YACf,CAAC;YAED,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YACnC,OAAO,yBAAyB,CAAC,CAAC,EAAE,IAAI,EAAE;gBACxC,IAAI;gBACJ,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK,EAAE;gBACrD,MAAM;gBACN,SAAS,EAAE,eAAe;gBAC1B,SAAS,EAAE,MAAM;aAClB,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACnC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,CAAC,CAAA;YACnC,OAAO,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE;gBAC7B,IAAI;gBACJ,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK,EAAE;gBACrD,MAAM;gBACN,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,SAAS,CAAC,CAAC,EAAE;YAClB,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,GAAG;SACZ,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAkDD,SAAS,gBAAgB,CACvB,IAAa,EACb,OAAuC;IAEvC,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,kEAAkE;IAClE,2EAA2E;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrD,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAA;QACtE,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,OAAmC;IAC7D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAC/C,OAAO,CACL,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,wBAAwB;QACtD,MAAM,EAAE,SAAS,IAAI,qCAAqC;QAC1D,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,qBAAqB;QAC5D,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,sBAAsB;QAC1D,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,6CAA6C;KAC9G,CAAA;AACH,CAAC;AAeD,SAAS,mBAAmB,CAAC,CAAe;IAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IAC5C,IAAI,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAEpC,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACnD,IAAI,aAAa,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5B,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9C,IAAI,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IAEhD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACtC,IAAI,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;IAE9C,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,CAAe;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAM;IACxC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,CAAe;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,CAAe;IACnC,MAAM,SAAS,GAAG,CAAC,CAAC,GAA8B,CAAA;IAClD,OAAO,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxF,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAe;IAC3C,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACnD,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAA;IAChC,OAAO,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa,EAAE,MAAsB;IAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,CAAe,EAAE,OAA0B;IAC5D,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;IACjC,uEAAuE;IACvE,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IACrC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,OAAO,CAAC,CAAC,IAAI,CACX;QACE,KAAK,EAAE;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB;QACD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,EACD,OAAO,CAAC,MAAM,CACf,CAAA;AACH,CAAC;AAUD,SAAS,KAAK,CAAC,CAAe;IAC5B,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAqB;IAChD,OAAO;QACL,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,SAAS;KAChB,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAe;IAC1C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IACxE,OAAO;QACL,EAAE,EACA,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAChC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;YACzB,SAAS;YACT,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAChC,WAAW;QACb,IAAI,EAAE,QAAQ;KACf,CAAA;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,CAA4B,EAC5B,IAAyB,EACzB,OAAsB;IAEtB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC,CAAA;IAC7E,IAAI,CAAC,UAAU;QACb,OAAO,SAAS,CAAC,CAAC,EAAE;YAClB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,GAAG;SACZ,CAAC,CAAA;IAEJ,OAAO,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACvB,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE;YACjB,GAAG,OAAO,CAAC,SAAS;YACpB,OAAO,EAAE;gBACP,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;aACnD;SACF,CAAC,CAAA;QACF,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,CAA4B,EAC5B,IAAyB,EACzB,OAAwB;IAExB,IAAI,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAE3F,CAAC,CAAC,MAAM,CACN,aAAa,EACb,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAC7E,CAAA;IACD,OAAO,SAAS,CAAC,CAAC,EAAE;QAClB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAe,EAAE,MAAwB;IACpE,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IACzD,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AACnD,CAAC"}