tapimo 0.19.0 → 0.20.0

package/dist/internal/ZoneAccess.js

@@ -1,69 +1,129 @@
+import { HTTPException } from 'hono/http-exception';
 import * as Db from '../db/Db.js';
 import * as ZoneDelegations from '../db/tables/zoneDelegations.js';
-import * as Scope from '../Scope.js';
 import * as Auth from './Auth.js';
 import * as ExecutionContext from './ExecutionContext.js';
+import * as Response from './Response.js';
 import * as Store from './Store.js';
 import * as Timeout from './Timeout.js';
+import * as Timing from './Timing.js';
 import * as ZoneDelegation from './ZoneDelegation.js';
-/** Bounded counter of Zone decisions by Zone, scope outcome, grant, and delegation agreement. */
+/** Bounded counter of Zone decisions by Zone, outcome, and grant. */
 export const decisionMetric = 'zone_access_decision_count';
-/** Counter of delegation reads that failed, leaving a decision without a shadow comparison. */
+/** Counter of failed delegation reads: `phase="request"` refused a request with a `503`, `phase="refresh"` was a background refresh that left the cached copy serving. */
 export const lookupFailureMetric = 'zone_delegation_lookup_failure_count';
-/** How long one organization's delegations are cached per colo; Postgres stays authoritative. */
+/** Age after which a cached delegation read is refreshed in the background while still answering. */
 export const delegationTtl = 30_000;
-/** Longest a delegation read may run; the comparison is advisory, so it gives up early. */
-export const delegationTimeout = 2_000;
-/** Longest {@link settle} waits for a read still in flight once the handler returned. */
-export const settleGrace = 100;
+/** Oldest cached delegation read that may answer; beyond it the request reads Postgres. Bounds revocation latency per colo. */
+export const delegationMaxAge = 60_000;
+/** Longest a delegation read (cache and Postgres together) may run before it fails. */
+export const delegationTimeout = 5_000;
+/**
+ * Loads the caller organization's active delegations on first demand and
+ * shares the read across the request, for API keys that can read or broadcast
+ * to a Zone at all. Call it before {@link check} or {@link eligible} decide;
+ * requests never touching a Zone pay nothing. Client cache directives are
+ * ignored. A read Postgres cannot answer refuses delegated Zone access with a
+ * retriable `503`.
+ */
+export function ensure(c) {
+    const pending = c.get('zoneDelegationsPending');
+    if (pending)
+        return pending;
+    const principal = Auth.getPrincipal(c);
+    if (principal?.type !== 'api_key' || !zoneCapable(principal))
+        return Promise.resolve(undefined);
+    const zones = c.get('zones');
+    if (!zones?.size)
+        return Promise.resolve(undefined);
+    const owner = { environment: principal.environment, orgId: principal.orgId };
+    const started = Timing.time(c, 'zone_delegations', () => Cached.read(c, owner)).then((records) => ({ records }), () => {
+        metrics(c)?.count(lookupFailureMetric, 1, { phase: 'request' });
+        return { failed: true };
+    });
+    void started.then((delegations) => c.set('zoneDelegations', delegations));
+    c.set('zoneDelegationsPending', started);
+    return started;
+}
 /**
  * Decides whether the caller may access one Zone without recording anything.
- * Filters narrowing a Zone list use this; the gate for the Zone a request is
- * about uses {@link authorize}. Scopes are inspected only here.
+ * Filters narrowing a Zone list use this after awaiting {@link ensure}; the gate
+ * for the Zone a request is about uses {@link authorize}. Without the request's
+ * addresses, only a delegation covering every account and token admits a read.
  */
 export function check(c, options) {
-    const { chainId, verb, zoneToken = false } = options;
-    const principal = Auth.getPrincipal(c);
-    const scopes = principal?.type === 'api_key' ? principal.apiKey.scopes : undefined;
-    // A forwarded Zone token is the operative credential, so it outranks scopes.
-    const grant = (() => {
-        if (zoneToken)
-            return 'zone_token';
-        if (scopes?.includes(Scope.wildcard))
-            return 'wildcard';
-        if (scopes?.includes(`zone:${chainId}:${verb}`))
-            return 'scope';
-        return undefined;
-    })();
-    if (grant)
-        return { allowed: true, grant };
-    return {
-        allowed: false,
-        error: { code: 'api_key_forbidden', message: denialMessage(options), status: 403 },
-    };
+    const gated = gate(c, options);
+    if (!('eligible' in gated))
+        return gated;
+    const delegation = ZoneDelegation.decide({
+        accounts: [],
+        delegation: coverage(gated.record, { accounts: [], tokens: [] }),
+        tokens: [],
+    });
+    return conclude(options, delegation);
+}
+/**
+ * Whether the caller could read one Zone given a covering request: the key is
+ * tagged and scoped for it and its organization holds an active delegation.
+ * Selection filters use this before {@link authorize} decides each Zone with
+ * the request's addresses; an unreadable delegation counts, so `authorize` answers `503`.
+ */
+export function eligible(c, options) {
+    const gated = gate(c, { chainId: options.chainId, verb: 'read' });
+    return 'eligible' in gated || gated.allowed || gated.error.status === 503;
+}
+/**
+ * Whether a listing may include one Zone the caller reads, after awaiting
+ * {@link ensure}. Throws a `503` when the delegations could not be read, so a
+ * listing never silently omits Zones it could not verify.
+ */
+export function visible(c, options) {
+    const result = check(c, { chainId: options.chainId, verb: 'read' });
+    if (!result.allowed && result.error.status === 503)
+        throw new HTTPException(503, { res: Response.error(c, result.error) });
+    return result.allowed;
 }
 /**
  * Decides whether the caller may access the Zone the request is about and
- * records the decision on the context for the request log. The caller
- * organization's delegations start loading here so {@link settle} can compare
- * them against the final scope decision without delaying the response.
+ * records the decision on the context for the request log. A read loads the
+ * delegations, then checks the requested accounts and tokens against the
+ * delegation's members; a failed read refuses the request with a retriable `503`.
  */
-export function authorize(c, options) {
-    const result = check(c, options);
+export async function authorize(c, options) {
+    const addresses = { accounts: normalize(options.accounts), tokens: normalize(options.tokens) };
+    // A disconnect while the delegation or member reads are pending logs after the decision, so denials stay unbilled.
+    const { delegation, result } = await Auth.check(c, {
+        allows: (decided) => decided.result.allowed,
+        fn: async () => {
+            // Generic writes need the delegation too; a forwarded Zone token never does.
+            if (!options.zoneToken)
+                await ensure(c);
+            const gated = gate(c, options);
+            if (!('eligible' in gated))
+                return { delegation: undefined, result: gated };
+            const delegation = await evaluate(c, gated, addresses);
+            if (delegation)
+                return { delegation, result: conclude(options, delegation) };
+            const denied = { decision: 'deny', id: gated.record.id };
+            return { delegation: denied, result: unavailable(options) };
+        },
+    });
     const access = {
-        accounts: normalize(options.accounts),
+        ...addresses,
         chainId: options.chainId,
-        ...(result.allowed ? { grant: result.grant, scopeGrant: result.grant } : {}),
-        tokens: normalize(options.tokens),
+        ...(delegation === undefined ? {} : { delegation }),
+        ...(result.allowed ? { grant: result.grant } : {}),
         verb: options.verb,
     };
     c.set('zoneAccess', access);
-    const scope = delegationScope(c, access);
-    // Starts the evaluation behind the handler; `settle` awaits this same promise.
-    // A rejection is reported there, so an evaluation nobody settles stays quiet.
-    const decision = scope ? evaluate(c, access, scope) : undefined;
-    decision?.catch(() => undefined);
-    c.set('zoneDelegationDecision', decision);
+    // A later decision for the same Zone (raw RPC per method, relay per item) supersedes the earlier one.
+    const decisions = c.get('zoneAccessDecisions') ?? [];
+    const index = decisions.findIndex((decision) => decision.chainId === access.chainId);
+    if (index === -1)
+        decisions.push(access);
+    else
+        decisions[index] = access;
+    c.set('zoneAccessDecisions', decisions);
     return result;
 }
 /** Removes the recorded grant after a later check (method allowlist, sandbox) refused the request. */
@@ -73,102 +133,147 @@ export function deny(c) {
         return;
     const { grant: _grant, ...denied } = access;
     c.set('zoneAccess', denied);
-}
-/**
- * Computes the delegation decision for the recorded Zone access once the
- * handler finished and records it with the agreement flag and one bounded
- * metric. Agreement compares against the scope decision alone: later refusals
- * (quota, method allowlist, sandbox, workload identity) stay in place when
- * delegations replace scopes, so they are not disagreements. Admission is
- * already decided; a failed delegation read only leaves the comparison out.
- */
-export async function settle(c) {
-    const access = c.get('zoneAccess');
-    if (!access)
-        return;
-    // A disconnected client already emitted its log entry without these fields.
-    if (c.req.raw.signal.aborted)
-        return;
-    const metrics = c.get('metrics');
-    const tags = { chain_id: access.chainId, grant: access.grant ?? 'none', outcome: access.grant === undefined ? 'deny' : 'allow' }; // prettier-ignore
-    const decision = c.get('zoneDelegationDecision');
-    if (!decision) {
-        metrics?.count(decisionMetric, 1, { ...tags, agreement: 'skipped' });
-        return;
+    const decisions = c.get('zoneAccessDecisions');
+    if (decisions) {
+        const index = decisions.indexOf(access);
+        if (index !== -1)
+            decisions[index] = denied;
     }
-    // The evaluation usually finished behind the handler; a cold miss must not extend the response.
-    const pending = decision.then((value) => ({ value }), () => ({ value: undefined }));
-    const outcome = await Timeout.run(() => pending, { timeout: settleGrace }).catch(() => undefined);
-    if (outcome === undefined) {
-        // The read finishes in the background to warm the cache; a late failure still counts.
-        ExecutionContext.waitUntil(c)?.(pending.then(({ value }) => {
-            if (value === undefined)
-                metrics?.count(lookupFailureMetric, 1);
-        }));
-        metrics?.count(decisionMetric, 1, { ...tags, agreement: 'pending' });
-        return;
-    }
-    const delegation = outcome.value;
-    if (!delegation) {
-        metrics?.count(lookupFailureMetric, 1);
-        metrics?.count(decisionMetric, 1, { ...tags, agreement: 'unavailable' });
+}
+/** Meters every Zone decision recorded for the request once the handler finished, after later refusals applied. */
+export function settle(c) {
+    const decisions = c.get('zoneAccessDecisions');
+    // A disconnected client already emitted its log entry; its decisions were never final.
+    if (!decisions?.length || c.req.raw.signal.aborted)
         return;
-    }
-    const agreement = (delegation.decision === 'allow') === (access.scopeGrant !== undefined);
-    c.set('zoneAccess', { ...access, agreement, delegation });
-    metrics?.count(decisionMetric, 1, { ...tags, agreement: agreement ? 'agree' : 'disagree' });
+    for (const access of decisions)
+        metrics(c)?.count(decisionMetric, 1, {
+            chain_id: access.chainId,
+            grant: access.grant ?? 'none',
+            outcome: access.grant === undefined ? 'deny' : 'allow',
+        });
 }
 /**
- * Organization and environment whose delegations decide the request, or
- * undefined when no delegation applies: writes, anonymous and session callers
- * (no organization), and forwarded Zone tokens (the operative credential).
+ * Applies the credential checks that need no addresses: a forwarded Zone token
+ * outranks everything, writes stay on `zone:<chainId>:write`, and a read needs
+ * `zone:read`, a tag naming the Zone, and an active delegation. `*` grants no Zone.
  */
-function delegationScope(c, access) {
+function gate(c, options) {
+    const { chainId, verb, zoneToken = false } = options;
     const principal = Auth.getPrincipal(c);
-    // Broadcasts are user-signed, so they stay on key scopes and are never compared.
-    if (access.verb === 'write')
-        return undefined;
-    if (principal?.type !== 'api_key' || access.scopeGrant === 'zone_token')
+    if (zoneToken)
+        return { allowed: true, grant: 'zone_token' };
+    const refuse = () => ({
+        allowed: false,
+        error: { code: 'api_key_forbidden', message: denialMessage(options), status: 403 },
+    });
+    if (principal?.type !== 'api_key')
+        return refuse();
+    const { scopes } = principal.apiKey;
+    // Absent tags mean no Zone, so a later delegation never widens an existing key.
+    const tagged = principal.zoneTags?.includes(chainId) ?? false;
+    if (verb === 'write') {
+        // A stored per-Zone write scope keeps admitting its own Zone this release, exactly as before,
+        // until the write rewrite has run and the cleanup release strips it.
+        if (scopes.includes(`zone:${chainId}:write`))
+            return { allowed: true, grant: 'scope' };
+        // Broadcasts are account-signed, so the delegation's existence is the whole bound: revoking it
+        // stops the key, accounts and tokens are never checked, and the wildcard grants no Zone.
+        if (!scopes.includes('zone:write') || !tagged)
+            return refuse();
+        if (lookupFailed(c))
+            return unavailable(options);
+        if (!delegationFor(c, chainId))
+            return refuse();
+        return { allowed: true, grant: 'scope' };
+    }
+    if (!readable(principal) || !tagged)
+        return refuse();
+    // Only keys a delegation could admit learn the read failed; others keep their 403.
+    if (lookupFailed(c))
+        return unavailable(options);
+    const record = delegationFor(c, chainId);
+    if (!record)
+        return refuse();
+    return { eligible: true, record };
+}
+/** The organization's active delegation for one Zone; undefined when none, or when `ensure` never ran or failed, so callers fail closed. */
+function delegationFor(c, chainId) {
+    const delegations = c.get('zoneDelegations');
+    if (!delegations || 'failed' in delegations)
         return undefined;
-    return { environment: principal.environment, orgId: principal.orgId };
+    return delegations.records.find((candidate) => candidate.chainId === chainId);
+}
+/** Whether {@link ensure} ran and its delegation read failed with no recent copy to answer from. */
+function lookupFailed(c) {
+    const delegations = c.get('zoneDelegations');
+    return delegations !== undefined && 'failed' in delegations;
+}
+/** Refusal for a key a delegation might admit when the delegations could not be read. */
+function unavailable(options) {
+    return {
+        allowed: false,
+        error: {
+            code: 'zone_access_unavailable',
+            message: `Zone ${options.chainId} access could not be verified. Retry the request.`,
+            status: 503,
+        },
+    };
+}
+/** Whether the key's scopes and tags let it read any Zone at all: `zone:read` plus at least one tag. */
+function readable(principal) {
+    return principal.apiKey.scopes.includes('zone:read') && (principal.zoneTags?.length ?? 0) > 0;
+}
+/** Whether the key's scopes and tags let it use any Zone at all, reading or broadcasting. */
+function zoneCapable(principal) {
+    const { scopes } = principal.apiKey;
+    return ((scopes.includes('zone:read') || scopes.includes('zone:write')) &&
+        (principal.zoneTags?.length ?? 0) > 0);
+}
+/** Maps a delegation decision onto the gate result for the requested Zone. */
+function conclude(options, delegation) {
+    if (delegation.decision === 'allow')
+        return { allowed: true, grant: 'delegation' };
+    return {
+        allowed: false,
+        error: { code: 'api_key_forbidden', message: denialMessage(options), status: 403 },
+    };
 }
 /**
- * Evaluates the caller organization's delegation for one recorded access: the
- * delegation rows are cached per organization and environment, and the
- * requested accounts and tokens are checked for membership in one statement
- * each, cached per address, so a request never loads a whole member set.
- * Client cache directives are ignored throughout. Rejections surface in {@link settle}.
+ * Decides an eligible read against the delegation's members: the requested
+ * accounts and tokens are checked for membership in one statement each, cached
+ * per address, so a request never loads a whole member set. Returns undefined
+ * when the member read failed, which the caller refuses as unavailable.
  */
-async function evaluate(c, access, scope) {
-    const principal = Auth.getPrincipal(c);
+async function evaluate(c, eligible, addresses) {
+    const { record } = eligible;
+    const decide = (delegation) => ZoneDelegation.decide({ ...addresses, delegation });
+    const listed = { accounts: !record.accountsAll, tokens: !record.tokensAll };
+    if ((!listed.accounts || !addresses.accounts.length) &&
+        (!listed.tokens || !addresses.tokens.length))
+        return decide(coverage(record, { accounts: [], tokens: [] }));
     const db = Db.get(c.get('db'));
     const store = Store.authoritative(c.get('store'));
-    const records = await Store.memoize(() => ZoneDelegations.listActive(db, scope), {
-        flightTimeout: delegationTimeout,
-        key: `zone_delegations:v1:${scope.orgId}:${scope.environment}`,
-        store,
-        ttl: delegationTtl,
-    });
-    const record = records.find((candidate) => candidate.chainId === access.chainId);
-    const grant = access.scopeGrant;
-    const decide = (delegation) => ZoneDelegation.decide({
-        accounts: access.accounts,
-        delegation,
-        grant,
-        projectId: principal?.type === 'api_key' ? principal.projectId : undefined,
-        tokens: access.tokens,
-    });
-    // A key without its own grant is denied before coverage matters, so its members are never read.
-    if (!record || grant === undefined)
-        return decide(record && { accounts: [], id: record.id, projects: record.projects, tokens: [] });
     const wiring = { c, db, id: record.id, store };
-    const [accounts, tokens] = await Promise.all([
-        record.accountsAll
-            ? 'all'
-            : covered({ ...wiring, addresses: access.accounts, kind: 'account' }),
-        record.tokensAll ? 'all' : covered({ ...wiring, addresses: access.tokens, kind: 'token' }), // prettier-ignore
-    ]);
-    return decide({ accounts, id: record.id, projects: record.projects, tokens });
+    try {
+        const [accounts, tokens] = await Promise.all([
+            listed.accounts ? covered({ ...wiring, addresses: addresses.accounts, kind: 'account' }) : [],
+            listed.tokens ? covered({ ...wiring, addresses: addresses.tokens, kind: 'token' }) : [],
+        ]);
+        return decide(coverage(record, { accounts, tokens }));
+    }
+    catch {
+        metrics(c)?.count(lookupFailureMetric, 1, { phase: 'request' });
+        return undefined;
+    }
+}
+/** Builds the gate's view of a delegation from its row and the members already resolved. */
+function coverage(record, members) {
+    return {
+        accounts: record.accountsAll ? 'all' : members.accounts,
+        id: record.id,
+        tokens: record.tokensAll ? 'all' : members.tokens,
+    };
 }
 /**
  * Which of the requested addresses a delegation lists. Memberships are cached
@@ -192,6 +297,79 @@ async function covered(options) {
     }
     return addresses.filter((address) => hits.get(address) === '1' || found.has(address));
 }
+/**
+ * Per-colo delegation cache with stale-while-revalidate: entries younger than
+ * {@link delegationTtl} answer directly, older ones up to {@link delegationMaxAge}
+ * answer while a background read refreshes them, and anything older reads Postgres.
+ */
+var Cached;
+(function (Cached) {
+    /** Keys whose background refresh this isolate started, by start time, so concurrent requests start one. */
+    const refreshing = new Map();
+    async function read(c, owner) {
+        const deadline = performance.now() + delegationTimeout;
+        const db = Db.get(c.get('db'));
+        // Client cache directives never bypass or refresh authorization data.
+        const store = Store.authoritative(c.get('store'));
+        // v2 entries carry their read time; v1 entries were bare records.
+        const key = `zone_delegations:v2:${owner.orgId}:${owner.environment}`;
+        const entry = await Timing.time(c, 'zone_delegations_cache', () => Timeout.run(() => store.get(key), { timeout: delegationTimeout }).then(decode, () => undefined));
+        const age = entry ? Date.now() - entry.at : Infinity;
+        const wiring = { db, key, owner, store, waitUntil: ExecutionContext.waitUntil(c) };
+        if (entry && age <= delegationMaxAge) {
+            if (age > delegationTtl)
+                refresh(c, wiring);
+            return entry.records;
+        }
+        // A cache read that spent the budget never starts a query the caller no longer awaits.
+        const remaining = deadline - performance.now();
+        if (remaining <= 0)
+            throw new Error('Zone delegation read exceeded its budget.');
+        // Present on a failed request, this stage shows how long Postgres (through Hyperdrive) took.
+        return Timing.time(c, 'zone_delegations_query', () => load({ ...wiring, timeout: remaining }));
+    }
+    Cached.read = read;
+    /** Reads Postgres within the timeout and caches the result; cache writes are best-effort and never delay it. */
+    async function load(options) {
+        const { db, key, owner, store, timeout, waitUntil } = options;
+        const records = await Timeout.run(() => ZoneDelegations.listActive(db, owner), { timeout });
+        const entry = { at: Date.now(), records };
+        const persist = store
+            .put(key, JSON.stringify(entry), { ttl: delegationMaxAge })
+            .catch(() => undefined);
+        waitUntil?.(persist);
+        return records;
+    }
+    /** Refreshes an aging entry after the response; a failure leaves the entry answering until it is too old. */
+    function refresh(c, options) {
+        const started = refreshing.get(options.key);
+        if (started !== undefined && Date.now() - started < delegationTimeout)
+            return;
+        refreshing.set(options.key, Date.now());
+        const work = load({ ...options, timeout: delegationTimeout })
+            .catch(() => {
+            // The request's metrics already flushed, so a late count flushes itself.
+            metrics(c)?.count(lookupFailureMetric, 1, { phase: 'refresh' });
+            metrics(c)?.flush();
+        })
+            .finally(() => refreshing.delete(options.key));
+        options.waitUntil?.(work);
+    }
+    function decode(raw) {
+        if (raw === null)
+            return undefined;
+        try {
+            const entry = JSON.parse(raw);
+            return typeof entry.at === 'number' && Array.isArray(entry.records) ? entry : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+})(Cached || (Cached = {}));
+function metrics(c) {
+    return c.get('metrics');
+}
 /** Lowercases addresses so logged accounts and tokens compare exactly. */
 function normalize(addresses) {
     return addresses?.map((address) => address.toLowerCase()) ?? [];
@@ -199,12 +377,15 @@ function normalize(addresses) {
 /** Denial guidance per verb, keeping each route's published wording. */
 function denialMessage(options) {
     const { chainId, suggestZoneToken = false, verb } = options;
-    if (verb === 'write')
+    if (verb === 'write') {
+        const grant = `Broadcasting to zone ${chainId} requires \`zone:write\` with a tag for Zone ${chainId}, issued to an organization delegated that Zone`;
         return suggestZoneToken
-            ? `Broadcasting to zone ${chainId} requires \`zone:${chainId}:write\`, or a Zone token via \`X-Authorization-Token\`.`
-            : `Broadcasting to zone ${chainId} requires \`zone:${chainId}:write\`.`;
+            ? `${grant}, or a Zone token via \`X-Authorization-Token\`.`
+            : `${grant}.`;
+    }
+    const grant = `Use an API key granting \`zone:read\` and tagged for Zone ${chainId}, issued to an organization delegated that Zone`;
     return suggestZoneToken
-        ? `Chain id ${chainId} is a zone. Use an API key granting \`zone:${chainId}:read\`, or pass a Zone token via \`X-Authorization-Token\`.`
-        : `Chain ID ${chainId} is a Zone. Use an API key granting \`zone:${chainId}:read\`.`;
+        ? `Chain ID ${chainId} is a Zone. ${grant}, or pass a Zone token via \`X-Authorization-Token\`.`
+        : `Chain ID ${chainId} is a Zone. ${grant}.`;
 }
 //# sourceMappingURL=ZoneAccess.js.map

package/dist/internal/ZoneAccess.js.map

@@ -1 +1 @@
-{"version":3,"file":"ZoneAccess.js","sourceRoot":"","sources":["../../src/internal/ZoneAccess.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,eAAe,MAAM,iCAAiC,CAAA;AAElE,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AAuBrD,iGAAiG;AACjG,MAAM,CAAC,MAAM,cAAc,GAAG,4BAA4B,CAAA;AAE1D,+FAA+F;AAC/F,MAAM,CAAC,MAAM,mBAAmB,GAAG,sCAAsC,CAAA;AAEzE,iGAAiG;AACjG,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAA;AAEnC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAEtC,yFAAyF;AACzF,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAA;AA4B9B;;;;GAIG;AACH,MAAM,UAAU,KAAK,CACnB,CAAuB,EACvB,OAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAClF,6EAA6E;IAC7E,MAAM,KAAK,GAAG,CAAC,GAAsB,EAAE;QACrC,IAAI,SAAS;YAAE,OAAO,YAAY,CAAA;QAClC,IAAI,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,UAAU,CAAA;QACvD,IAAI,MAAM,EAAE,QAAQ,CAAC,QAAQ,OAAO,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,OAAO,CAAA;QAC/D,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,EAAE,CAAA;IACJ,IAAI,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IAC1C,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE;KACnF,CAAA;AACH,CAAC;AAyCD;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,CAAuB,EACvB,OAA0B;IAE1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAChC,MAAM,MAAM,GAAW;QACrB,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;QACjC,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAA;IACD,CAAC,CAAC,GAAG,CAAC,YAAqB,EAAE,MAAe,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACxC,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChC,CAAC,CAAC,GAAG,CAAC,wBAAiC,EAAE,QAAiB,CAAC,CAAA;IAC3D,OAAO,MAAM,CAAA;AACf,CAAC;AAeD,sGAAsG;AACtG,MAAM,UAAU,IAAI,CAAkC,CAAuB;IAC3E,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,YAAqB,CAAuB,CAAA;IACjE,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;QAAE,OAAM;IACvC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAA;IAC3C,CAAC,CAAC,GAAG,CAAC,YAAqB,EAAE,MAAe,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,CAAuB;IAEvB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,YAAqB,CAAuB,CAAA;IACjE,IAAI,CAAC,MAAM;QAAE,OAAM;IACnB,4EAA4E;IAC5E,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO;QAAE,OAAM;IACpC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAkB,CAAgC,CAAA;IACxE,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA,CAAC,kBAAkB;IACnJ,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAiC,CAE3C,CAAA;IACb,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;QACpE,OAAM;IACR,CAAC;IACD,gGAAgG;IAChG,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EACtB,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAC7B,CAAA;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACjG,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,sFAAsF;QACtF,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAA;QACjE,CAAC,CAAC,CACH,CAAA;QACD,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;QACpE,OAAM;IACR,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAA;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAA;QACtC,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;QACxE,OAAM;IACR,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAA;IACzF,CAAC,CAAC,GAAG,CAAC,YAAqB,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,UAAU,EAAW,CAAC,CAAA;IAC3E,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;AAC7F,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,CAAuB,EACvB,MAAc;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,iFAAiF;IACjF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC7C,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAA;AACvE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CACrB,CAAuB,EACvB,MAAc,EACd,KAA4B;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAa,CAAc,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,OAAgB,CAAgB,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE;QAC/E,aAAa,EAAE,iBAAiB;QAChC,GAAG,EAAE,uBAAuB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE;QAC9D,KAAK;QACL,GAAG,EAAE,aAAa;KACnB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAA;IAC/B,MAAM,MAAM,GAAG,CAAC,UAAsC,EAAE,EAAE,CACxD,cAAc,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU;QACV,KAAK;QACL,SAAS,EAAE,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC1E,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAA;IACJ,gGAAgG;IAChG,IAAI,CAAC,MAAM,IAAI,KAAK,KAAK,SAAS;QAChC,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IACjG,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAA;IAC9C,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,MAAM,CAAC,WAAW;YAChB,CAAC,CAAE,KAAe;YAClB,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,KAAe,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB;KAC1H,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,OAAO,CACpB,OAIC;IAED,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACrD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,6BAA6B,IAAI,IAAI,EAAE,IAAI,OAAO,EAAE,CAAA;IACrF,+EAA+E;IAC/E,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAU,CAAC,CACpF,CACF,CAAA;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAA;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAChG,CAAA;IACD,6DAA6D;IAC7D,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK;aAClB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;aACzE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,SAAwC;IACzD,OAAO,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAA;AACjE,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,OAAsB;IAC3C,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAC3D,IAAI,IAAI,KAAK,OAAO;QAClB,OAAO,gBAAgB;YACrB,CAAC,CAAC,wBAAwB,OAAO,oBAAoB,OAAO,0DAA0D;YACtH,CAAC,CAAC,wBAAwB,OAAO,oBAAoB,OAAO,WAAW,CAAA;IAC3E,OAAO,gBAAgB;QACrB,CAAC,CAAC,YAAY,OAAO,8CAA8C,OAAO,8DAA8D;QACxI,CAAC,CAAC,YAAY,OAAO,8CAA8C,OAAO,UAAU,CAAA;AACxF,CAAC"}
+{"version":3,"file":"ZoneAccess.js","sourceRoot":"","sources":["../../src/internal/ZoneAccess.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,eAAe,MAAM,iCAAiC,CAAA;AAElE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAA;AA8BrD,qEAAqE;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,4BAA4B,CAAA;AAE1D,0KAA0K;AAC1K,MAAM,CAAC,MAAM,mBAAmB,GAAG,sCAAsC,CAAA;AAEzE,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAA;AAEnC,+HAA+H;AAC/H,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAEtC,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAmCtC;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CACpB,CAAuB;IAEvB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAiC,CAAqC,CAAA;IAC5F,IAAI,OAAO;QAAE,OAAO,OAAO,CAAA;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/F,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAgB,CAA6C,CAAA;IACjF,IAAI,CAAC,KAAK,EAAE,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAA;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAClF,CAAC,OAAO,EAAe,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EACvC,GAAgB,EAAE;QAChB,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACzB,CAAC,CACF,CAAA;IACD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,iBAA0B,EAAE,WAAoB,CAAC,CAAC,CAAA;IAC3F,CAAC,CAAC,GAAG,CAAC,wBAAiC,EAAE,OAAgB,CAAC,CAAA;IAC1D,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CACnB,CAAuB,EACvB,OAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAC9B,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;QACvC,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChE,MAAM,EAAE,EAAE;KACX,CAAC,CAAA;IACF,OAAO,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,CAAuB,EACvB,OAAuC;IAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACjE,OAAO,UAAU,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CACrB,CAAuB,EACvB,OAAuC;IAEvC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IACnE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;QAChD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACxE,OAAO,MAAM,CAAC,OAAO,CAAA;AACvB,CAAC;AAkDD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,CAAuB,EACvB,OAA0B;IAE1B,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAA;IAC9F,mHAAmH;IACnH,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE;QACjD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;QAC3C,EAAE,EAAE,KAAK,IAAI,EAAE;YACb,6EAA6E;YAC7E,IAAI,CAAC,OAAO,CAAC,SAAS;gBAAE,MAAM,MAAM,CAAC,CAAC,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YAC9B,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;YAC3E,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;YACtD,IAAI,UAAU;gBAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAA;YAC5E,MAAM,MAAM,GAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAA;YAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAA;QAC7D,CAAC;KACF,CAAC,CAAA;IACF,MAAM,MAAM,GAAW;QACrB,GAAG,SAAS;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAA;IACD,CAAC,CAAC,GAAG,CAAC,YAAqB,EAAE,MAAe,CAAC,CAAA;IAC7C,sGAAsG;IACtG,MAAM,SAAS,GAAI,CAAC,CAAC,GAAG,CAAC,qBAA8B,CAA0B,IAAI,EAAE,CAAA;IACvF,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAA;IACpF,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;;QACnC,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,CAAA;IAC9B,CAAC,CAAC,GAAG,CAAC,qBAA8B,EAAE,SAAkB,CAAC,CAAA;IACzD,OAAO,MAAM,CAAA;AACf,CAAC;AAeD,sGAAsG;AACtG,MAAM,UAAU,IAAI,CAAkC,CAAuB;IAC3E,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,YAAqB,CAAuB,CAAA;IACjE,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;QAAE,OAAM;IACvC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAA;IAC3C,CAAC,CAAC,GAAG,CAAC,YAAqB,EAAE,MAAe,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,qBAA8B,CAAyB,CAAA;IAC/E,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,MAAM,CAAkC,CAAuB;IAC7E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,qBAA8B,CAAyB,CAAA;IAC/E,uFAAuF;IACvF,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO;QAAE,OAAM;IAC1D,KAAK,MAAM,MAAM,IAAI,SAAS;QAC5B,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE;YACnC,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM;YAC7B,OAAO,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;SACvD,CAAC,CAAA;AACN,CAAC;AAUD;;;;GAIG;AACH,SAAS,IAAI,CACX,CAAuB,EACvB,OAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IAC5D,MAAM,MAAM,GAAG,GAAiB,EAAE,CAAC,CAAC;QAClC,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE;KACnF,CAAC,CAAA;IACF,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,EAAE,CAAA;IAClD,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAA;IACnC,gFAAgF;IAChF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAA;IAC7D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,8FAA8F;QAC9F,qEAAqE;QACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,OAAO,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;QACtF,+FAA+F;QAC/F,yFAAyF;QACzF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,EAAE,CAAA;QAC9D,IAAI,YAAY,CAAC,CAAC,CAAC;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;QAChD,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC;YAAE,OAAO,MAAM,EAAE,CAAA;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,EAAE,CAAA;IACpD,mFAAmF;IACnF,IAAI,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,EAAE,CAAA;IAC5B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACnC,CAAC;AAED,4IAA4I;AAC5I,SAAS,aAAa,CACpB,CAAuB,EACvB,OAAe;IAEf,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,iBAA0B,CAA4B,CAAA;IAChF,IAAI,CAAC,WAAW,IAAI,QAAQ,IAAI,WAAW;QAAE,OAAO,SAAS,CAAA;IAC7D,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;AAC/E,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAkC,CAAuB;IAC5E,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,iBAA0B,CAA4B,CAAA;IAChF,OAAO,WAAW,KAAK,SAAS,IAAI,QAAQ,IAAI,WAAW,CAAA;AAC7D,CAAC;AAED,yFAAyF;AACzF,SAAS,WAAW,CAAC,OAAsB;IACzC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,QAAQ,OAAO,CAAC,OAAO,mDAAmD;YACnF,MAAM,EAAE,GAAG;SACZ;KACF,CAAA;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,QAAQ,CAAC,SAAuD;IACvE,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;AAC/F,CAAC;AAED,6FAA6F;AAC7F,SAAS,WAAW,CAAC,SAAuD;IAC1E,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAA;IACnC,OAAO,CACL,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/D,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CACtC,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,OAAsB,EAAE,UAAiC;IACzE,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IAClF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE;KACnF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACrB,CAAuB,EACvB,QAAkB,EAClB,SAAoB;IAEpB,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAA;IAC3B,MAAM,MAAM,GAAG,CAAC,UAAqC,EAAE,EAAE,CACvD,cAAc,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAA;IAC3E,IACE,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChD,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QAE5C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAa,CAAc,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,OAAgB,CAAgB,CAAC,CAAA;IACzE,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YAC7F,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;SACxF,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/D,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAS,QAAQ,CAAC,MAA8B,EAAE,OAAkB;IAClE,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ;QACvD,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;KAClD,CAAA;AACH,CAAC;AAUD;;;GAGG;AACH,KAAK,UAAU,OAAO,CACpB,OAIC;IAED,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACrD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,6BAA6B,IAAI,IAAI,EAAE,IAAI,OAAO,EAAE,CAAA;IACrF,+EAA+E;IAC/E,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAU,CAAC,CACpF,CACF,CAAA;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAA;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAChG,CAAA;IACD,6DAA6D;IAC7D,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK;aAClB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;aACzE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;AACvF,CAAC;AAED;;;;GAIG;AACH,IAAU,MAAM,CAyFf;AAzFD,WAAU,MAAM;IAQd,2GAA2G;IAC3G,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAErC,KAAK,UAAU,IAAI,CACxB,CAAuB,EACvB,KAA4B;QAE5B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAA;QACtD,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAa,CAAc,CAAC,CAAA;QACpD,sEAAsE;QACtE,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,OAAgB,CAAgB,CAAC,CAAA;QACzE,kEAAkE;QAClE,MAAM,GAAG,GAAG,uBAAuB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAA;QACrE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAChE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,IAAI,CACpE,MAAM,EACN,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAA;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;QACpD,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;QAClF,IAAI,KAAK,IAAI,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,aAAa;gBAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAC3C,OAAO,KAAK,CAAC,OAAO,CAAA;QACtB,CAAC;QACD,uFAAuF;QACvF,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QAC9C,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAChF,6FAA6F;QAC7F,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAChG,CAAC;IA3BqB,OAAA,IAAI,OA2BzB,CAAA;IAeD,gHAAgH;IAChH,KAAK,UAAU,IAAI,CAAC,OAAsC;QACxD,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;QAC7D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QAC3F,MAAM,KAAK,GAAU,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAA;QAChD,MAAM,OAAO,GAAG,KAAK;aAClB,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;aAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,SAAS,EAAE,CAAC,OAAO,CAAC,CAAA;QACpB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,6GAA6G;IAC7G,SAAS,OAAO,CAAkC,CAAuB,EAAE,OAAgB;QACzF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,iBAAiB;YAAE,OAAM;QAC7E,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;aAC1D,KAAK,CAAC,GAAG,EAAE;YACV,yEAAyE;YACzE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAC/D,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAA;QACrB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAChD,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,SAAS,MAAM,CAAC,GAAkB;QAChC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,CAAA;YACtC,OAAO,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;AACH,CAAC,EAzFS,MAAM,KAAN,MAAM,QAyFf;AAED,SAAS,OAAO,CAAkC,CAAuB;IACvE,OAAO,CAAC,CAAC,GAAG,CAAC,SAAkB,CAAgC,CAAA;AACjE,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,SAAwC;IACzD,OAAO,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAA;AACjE,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,OAAsB;IAC3C,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAC3D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,wBAAwB,OAAO,gDAAgD,OAAO,iDAAiD,CAAA;QACrJ,OAAO,gBAAgB;YACrB,CAAC,CAAC,GAAG,KAAK,kDAAkD;YAC5D,CAAC,CAAC,GAAG,KAAK,GAAG,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,6DAA6D,OAAO,iDAAiD,CAAA;IACnI,OAAO,gBAAgB;QACrB,CAAC,CAAC,YAAY,OAAO,eAAe,KAAK,uDAAuD;QAChG,CAAC,CAAC,YAAY,OAAO,eAAe,KAAK,GAAG,CAAA;AAChD,CAAC"}