tinybeeai 0.0.0-stage → 0.16.1

package/dist/review/security.js

@@ -0,0 +1,432 @@
+// Security and robustness pass of the PR review (docs/DOGFOOD-LEDGER.md, false negatives).
+//
+// The pass triggers when the diff touches process execution, git clone or checkout, file system
+// paths or copies, tokens or auth, webhooks or event intake, deletes, temp folders, the clock in a
+// test, approval or status paths, or the contract of an exported function. It then asks a fixed
+// checklist (SECURITY_CHECKLIST). The reviewer model answers it from the <security_pass> block; the
+// detectors below add script leads with a changed line and a failure scenario, which go to the
+// reviewer as signals and which the rule-based backend turns into risks.
+//
+// Every finding is a risk to test, not a bug: it counts as a bug only when a test reproduces it
+// (findBugs in render.ts skips risks of this pass).
+//
+// Deterministic for the same scope and checkout. No model call, no write.
+import { isCommentOnly } from './lenses.js';
+/** The fixed checklist, in the order the prompt asks it. */
+export const SECURITY_CHECKLIST = [
+    {
+        id: 'attacker_choice',
+        question: 'Can an attacker choose what runs or which commit is checked out, for example with forged event fields or an unsigned webhook?',
+        riskKind: 'security',
+        topics: ['process_exec', 'git_checkout', 'event_intake'],
+    },
+    {
+        id: 'path_safety',
+        question: 'Can a path escape its folder: path traversal, a symlink on the way, a swap between the check and the use (TOCTOU), or a special file such as a named pipe?',
+        riskKind: 'security',
+        topics: ['file_paths', 'git_checkout', 'temp_folders'],
+    },
+    {
+        id: 'delete_in_flight',
+        question: 'What happens to in-flight work (runs, jobs, approvals, pending posts) when the object it belongs to is deleted?',
+        riskKind: 'robustness',
+        topics: ['deletes'],
+    },
+    {
+        id: 'caller_access',
+        question: 'Who may call this: no token, a phone token, the owner token? Does the change let a weaker token read or change more?',
+        riskKind: 'security',
+        topics: ['tokens_auth', 'event_intake'],
+    },
+    {
+        id: 'changed_contract',
+        question: 'Which callers of a function whose contract changed (result, throws, arguments) still expect the old contract? List them from the code graph.',
+        riskKind: 'robustness',
+        topics: ['contract_change'],
+    },
+    {
+        id: 'temp_cleanup',
+        question: 'Does the change create temp folders or files without removing them on every path, failures included?',
+        riskKind: 'robustness',
+        topics: ['temp_folders'],
+    },
+    {
+        id: 'time_dependent_test',
+        question: 'Does a test depend on the clock, such as "today", a local time or a date near midnight, without a fixed clock?',
+        riskKind: 'robustness',
+        topics: ['clock_in_tests'],
+    },
+    {
+        id: 'open_status',
+        question: 'Does an approval, check or status that the change opens have a close path when it is rejected, expires or fails?',
+        riskKind: 'robustness',
+        topics: ['approval_status'],
+    },
+];
+export const SECURITY_CHECK_IDS = SECURITY_CHECKLIST.map((c) => c.id);
+export function isSecurityCheck(kind) {
+    return SECURITY_CHECK_IDS.includes(kind);
+}
+export function checklistItem(id) {
+    return SECURITY_CHECKLIST.find((c) => c.id === id);
+}
+export const TOPIC_WORDS = {
+    process_exec: 'process execution',
+    git_checkout: 'git clone or checkout',
+    file_paths: 'file system paths or copies',
+    tokens_auth: 'tokens or auth',
+    event_intake: 'webhooks or event intake',
+    deletes: 'deletes',
+    temp_folders: 'temp folders',
+    clock_in_tests: 'the clock in a test',
+    approval_status: 'approval or status paths',
+    contract_change: 'the contract of an exported function',
+};
+// ---------- topics ----------
+const TOPIC_RE = {
+    process_exec: /(?<![.\w])(?:spawn|spawnSync|exec|execSync|execFile|execFileSync|runTracked|execa|Popen|check_output)\s*\(|\bchild_process\b|\bos\.system\(/,
+    git_checkout: /\bgit\s+(?:clone|checkout|worktree|fetch|reset)\b|['"](?:clone|checkout|worktree|fetch)['"]\s*[,\]]/,
+    file_paths: /\b(?:copyFile|copyFileSync|cpSync|writeFile|writeFileSync|createWriteStream|rename|renameSync|symlink|symlinkSync|realpath|realpathSync|lstat|lstatSync|unlink|unlinkSync|rmSync|mkdirSync)\s*\(|\bpath\.(?:join|resolve)\(/,
+    tokens_auth: /\b(?:token|bearer|authorization|authorize|apiKey|api_key|secret|password|session|cookie|jwt|oauth)\w*/i,
+    event_intake: /webhook|x-hub-signature|\bsignature\b|\bpayload\b|\bnormaliz\w*\(|\bdelivery\w*|\bheadSha\b|\breq(?:uest)?\.body\b/i,
+    deletes: /\bDELETE\s+FROM\b|\.delete\(|\b(?:delete|remove|destroy|purge)[A-Z]\w*\s*\(|\brmSync\(|\bunlinkSync\(/,
+    temp_folders: /\bmkdtemp(?:Sync)?\(|\btmpdir\(\)|\bmkstemp\b|\btempfile\b|['"`]\/tmp\//,
+    clock_in_tests: /\btoday\b|\bnew Date\(\)|\bDate\.now\(\)|\\d\\d:\\d\\d|\btoLocale(?:Date|Time)?String\(|\bget(?:Hours|Date|Day)\(\)/,
+    approval_status: /\bapproval\w*|\bstatus\s*:\s*['"](?:pending|in_progress|queued|waiting)['"]|\bcheck[_ ]?runs?\b|\bchecks\.create\b|\bcreateCommitStatus\b/i,
+};
+function codeFiles(scope) {
+    return scope.files.filter((f) => (f.class === 'source' || f.class === 'test' || f.class === 'config') && f.status !== 'removed');
+}
+function sortedAdded(f) {
+    return [...f.added.entries()].filter(([, t]) => !isCommentOnly(t)).sort((a, b) => a[0] - b[0]);
+}
+function topicsOf(scope, findings) {
+    const out = [];
+    for (const topic of Object.keys(TOPIC_RE)) {
+        const re = TOPIC_RE[topic];
+        let hit = null;
+        for (const f of codeFiles(scope)) {
+            if (topic === 'clock_in_tests' && f.class !== 'test')
+                continue;
+            const m = sortedAdded(f).find(([, t]) => re.test(t));
+            if (m) {
+                hit = { file: f.path, line: m[0] };
+                break;
+            }
+        }
+        if (hit)
+            out.push({ topic, ...hit });
+    }
+    const contract = findings.find((x) => x.check === 'changed_contract');
+    if (contract)
+        out.push({ topic: 'contract_change', file: contract.file, line: contract.line });
+    return out;
+}
+// ---------- detectors ----------
+/** Words that show the code checks a commit, a ref or a delivery against a source it trusts. */
+const VERIFY_MARKERS = /--is-ancestor|\bverif\w*(?:Commit|Head|Sha|Signature|Delivery)\b|\btimingSafeEqual\b|\bcreateHmac\b|\bhead\.sha\s*[!=]==|\bheadSha\s*[!=]==|\bexpectedSha\b/;
+/** A git command that puts a commit's files on disk, or runs them, ranked: checkout first, fetch last. */
+const GIT_CHECKOUT_LINE = [
+    [/['"]worktree['"]\s*,\s*['"]add['"]|\bgit\s+worktree\s+add\b/, 'adds a git worktree', 0],
+    [/['"]checkout['"]\s*[,\]]|\bgit\s+checkout\b/, 'runs git checkout', 0],
+    [/['"]clone['"]\s*[,\]]|\bgit\s+clone\b/, 'runs git clone', 1],
+    [/['"]reset['"]\s*,\s*['"]--hard['"]|\bgit\s+reset\s+--hard\b/, 'runs git reset --hard', 1],
+    [/['"]fetch['"]\s*[,\]]|\bgit\s+fetch\b/, 'runs git fetch', 2],
+];
+/** The file runs git: an argv with 'git', a git() helper, or a git command line. */
+const RUNS_GIT = /['"]git['"]\s*,|\bgit\s*\(|\bsimpleGit\b|['"`]git\s+\w/;
+/** Names that carry a commit, a ref or a command from an event. */
+const EVENT_VALUE = /\b(?:sha|headSha|head|ref|commit|branch|prNumber|payload|event|delivery)\b|\$\{/;
+function attackerChoice(x, out) {
+    const eventDiff = x.scope.files.some((f) => [...f.added.values()].some((t) => /\b(?:sha|headSha|pr|prNumber|event|payload|webhook)\b/.test(t)));
+    if (!eventDiff)
+        return;
+    for (const f of x.scope.files) {
+        if (f.class !== 'source' || f.status === 'removed')
+            continue;
+        const head = x.view.read(f.path) ?? [...f.added.values()].join('\n');
+        if (!RUNS_GIT.test(head) || VERIFY_MARKERS.test(head))
+            continue;
+        let best = null;
+        for (const [n, text] of sortedAdded(f)) {
+            for (const [re, what, rank] of GIT_CHECKOUT_LINE) {
+                if (!re.test(text))
+                    continue;
+                // A bare name or a template among the arguments: the commit or the folder comes from outside the code.
+                const args = text.replace(/(['"])(?:[^'"\\]|\\.)*?\1/g, '""');
+                if (!EVENT_VALUE.test(args) && !/,\s*[A-Za-z_$][\w$.]*\s*[\],)]/.test(args))
+                    continue;
+                if (!best || rank < best.rank)
+                    best = { line: n, what, rank };
+                break;
+            }
+        }
+        if (!best)
+            continue;
+        out.push({
+            id: '',
+            check: 'attacker_choice',
+            file: f.path,
+            line: best.line,
+            title: 'Forged event can choose the code that runs',
+            detail: `${best.what} on a commit named by the event; no line in this file checks that commit against the pull request head or a signed delivery`,
+            scenario: 'A forged event names a commit from a fork, and the runner checks it out and runs it.',
+        });
+    }
+}
+/** A function that deletes an object: its name, or SQL that deletes rows. */
+const DELETE_FN = /^\s*export\s+(?:async\s+)?function\s+((?:delete|remove|destroy|purge)([A-Z]\w*))\s*\(/;
+const DELETE_SQL = /\bDELETE\s+FROM\s+([A-Za-z_]\w*|\$\{)/i;
+/** Work that can still be running when its owner goes: runs, jobs, approvals, queued posts. */
+const IN_FLIGHT = /(?<![.\w])(runs?|jobs?|approvals?|queue[ds]?|pending|in-?flight|running|workers?|tasks?)\b(?!\s*\()/gi;
+function deleteInFlight(x, out) {
+    for (const f of x.scope.files) {
+        if (f.class !== 'source' || f.status === 'removed')
+            continue;
+        const head = x.view.read(f.path) ?? [...f.added.values()].join('\n');
+        const lines = head.split('\n');
+        const added = sortedAdded(f);
+        const def = added.find(([, t]) => DELETE_FN.test(t));
+        const sql = added.find(([, t]) => DELETE_SQL.test(t));
+        const hit = def ?? sql;
+        if (!hit)
+            continue;
+        // The work must belong to what is deleted: it shows in the body of the delete function (to its closing brace).
+        const from = hit[0] - 1;
+        let to = lines.findIndex((l, i) => i > from && /^\}/.test(l));
+        if (to < 0)
+            to = Math.min(lines.length, from + 80);
+        const body = def ? lines.slice(from, to + 1).join('\n') : (lines[from] ?? '');
+        const work = [...new Set([...body.matchAll(IN_FLIGHT)].map((m) => m[1].toLowerCase().replace(/s$/, '')))];
+        if (!work.length)
+            continue;
+        const m = def ? DELETE_FN.exec(def[1]) : null;
+        const object = m ? m[2].replace(/([a-z])([A-Z])/g, '$1 $2').toLowerCase() : 'object';
+        const kinds = work.filter((w) => ['run', 'job', 'approval', 'task', 'worker'].includes(w)).slice(0, 3);
+        const what = kinds.length ? kinds.join(', ') : 'work';
+        out.push({
+            id: '',
+            check: 'delete_in_flight',
+            file: f.path,
+            line: hit[0],
+            title: `In-flight work acts after its ${object} is deleted`,
+            detail: m
+                ? `${m[1]} deletes the ${object} and its rows while its ${what} can still be running`
+                : `deletes rows while ${what} that use them can still be running`,
+            scenario: `A ${kinds[0] ?? 'run'} of the ${object} waits on a slow step during the delete, then posts a comment or creates an approval.`,
+        });
+    }
+}
+/** A check on a path: where it leads or what it is. */
+const PATH_CHECK = /\b(?:realpath|realpathSync|lstat|lstatSync|stat|statSync|existsSync|access|accessSync)\s*\(/;
+/** A write or copy that opens the path again by name. */
+const PATH_USE = /\b(copyFile|copyFileSync|cpSync|cp|writeFile|writeFileSync|createWriteStream|rename|renameSync|symlink|symlinkSync|link|linkSync)\s*\(/;
+/** Signs that the code holds a file descriptor or refuses links: then the check and the use are one object. */
+const FD_SAFE = /\bO_NOFOLLOW\b|\bfstat(?:Sync)?\s*\(|\bO_NONBLOCK\b|\bopenat\b|\bRESOLVE_/;
+function pathSafety(x, out) {
+    for (const f of x.scope.files) {
+        if (f.class !== 'source' || f.status === 'removed')
+            continue;
+        const head = x.view.read(f.path) ?? [...f.added.values()].join('\n');
+        if (FD_SAFE.test(head))
+            continue;
+        const added = sortedAdded(f);
+        const firstCheck = added.find(([, t]) => PATH_CHECK.test(t));
+        if (!firstCheck)
+            continue;
+        // The use comes after a check: the path is resolved and checked, then opened again by name.
+        const use = added.find(([n, t]) => n > firstCheck[0] && PATH_USE.test(t));
+        if (!use)
+            continue;
+        const call = PATH_USE.exec(use[1])[1];
+        out.push({
+            id: '',
+            check: 'path_safety',
+            file: f.path,
+            line: use[0],
+            title: 'File copy can write outside its folder',
+            detail: `${call} opens the path again by name after the symlink and type checks; no file descriptor or O_NOFOLLOW ties the check to the copy`,
+            scenario: 'A symlinked folder, a swap after the check, or a named pipe makes the copy write outside or hang.',
+        });
+    }
+}
+/** The exported function that holds a line of the head text, with its line number. */
+function enclosingExport(lines, line) {
+    for (let i = line - 1; i >= 0; i--) {
+        const t = lines[i] ?? '';
+        const m = /^export\s+(?:async\s+)?function\s*\*?\s*([A-Za-z_$][\w$]*)\s*[(<]/.exec(t) ?? /^export\s+const\s+([A-Za-z_$][\w$]*)\s*=\s*(?:async\s*)?\(/.exec(t);
+        if (m)
+            return { name: m[1], at: i + 1 };
+        // A closing brace at column 0 ends the function above: the line is not inside it.
+        if (i < line - 1 && /^\}/.test(t))
+            return null;
+    }
+    return null;
+}
+/** A line that decides what the function gives back or how it fails. */
+const CONTRACT_LINE = /^\s*(?:return\b|throw\b)/;
+/** A missing value now decides the result: `!x ||`, `x == null ||`, `?? true`. */
+const ABSENCE = /(?:^|[\s(|&])!\s*[\w$.?]+\s*\|\||\b[\w$.?]+\s*[=!]==?\s*(?:null|undefined)\s*\|\||\?\?\s*(?:true|false|null|undefined|0|''|"")/;
+const LITERAL_RETURN = /^\s*return\s+(true|false|null|undefined|-?\d+|'[^']*'|"[^"]*")\s*;?\s*$/;
+/**
+ * How the replaced lines change what callers get, or null for a rename, a refactor or a delegation: a missing
+ * value now decides the result, a new throw, or a literal result that is another literal now.
+ */
+function contractShift(was, now) {
+    const absent = (ls) => ls.some((l) => /^\s*return\b/.test(l) && ABSENCE.test(l));
+    if (absent(now) && !absent(was))
+        return 'a missing value now decides its result';
+    const throws = (ls) => ls.filter((l) => /^\s*throw\b/.test(l)).length;
+    if (throws(now) > throws(was))
+        return 'it throws in a new case';
+    const lits = (ls) => ls.map((l) => LITERAL_RETURN.exec(l)?.[1]).filter((v) => !!v);
+    const a = lits(was);
+    const b = lits(now);
+    if (a.length && b.length && b.some((v) => !a.includes(v)))
+        return `it returns ${b.find((v) => !a.includes(v))} where it returned ${a[0]}`;
+    return null;
+}
+const MAX_CALLERS = 12;
+function changedContract(x, out) {
+    for (const f of x.scope.files) {
+        if (f.class !== 'source' || f.status !== 'modified')
+            continue;
+        const head = x.view.read(f.path);
+        if (head === null)
+            continue;
+        const lines = head.split('\n');
+        const seen = new Set();
+        for (const r of f.removedRuns) {
+            if (!r.replacedBy.length)
+                continue;
+            const was = r.lines.filter((l) => CONTRACT_LINE.test(l) && !isCommentOnly(l));
+            const now = r.replacedBy.map((n) => f.added.get(n) ?? '').filter((l) => CONTRACT_LINE.test(l) && !isCommentOnly(l));
+            if (!was.length || !now.length)
+                continue;
+            const shift = contractShift(was, now);
+            if (!shift)
+                continue;
+            const at = r.replacedBy.find((n) => CONTRACT_LINE.test(f.added.get(n) ?? ''));
+            const fn = enclosingExport(lines, at);
+            if (!fn || seen.has(fn.name))
+                continue;
+            seen.add(fn.name);
+            const call = new RegExp(`(?<![\\w$.])${fn.name.replace(/\$/g, '\\$')}\\s*\\(`);
+            const callers = [];
+            const importers = [...(x.reverse?.get(f.path) ?? [])].sort();
+            for (const file of [f.path, ...importers]) {
+                const text = file === f.path ? head : x.view.read(file);
+                if (text === null)
+                    continue;
+                text.split('\n').forEach((t, i) => {
+                    const n = i + 1;
+                    if (file === f.path && n === fn.at)
+                        return;
+                    if (isCommentOnly(t) || !call.test(t))
+                        return;
+                    // A caller the change itself rewrote was adapted on purpose.
+                    const fc = x.scope.files.find((s) => s.path === file);
+                    if (fc?.changed.has(n))
+                        return;
+                    callers.push({ file, line: n });
+                });
+            }
+            if (!callers.length)
+                continue;
+            const product = callers.filter((c) => !/(^|\/)(test|tests|__tests__)\/|\.(test|spec)\.[cm]?[jt]sx?$/.test(c.file));
+            const list = (product.length ? product : callers).slice(0, MAX_CALLERS);
+            const files = [...new Set(list.map((c) => c.file))];
+            out.push({
+                id: '',
+                check: 'changed_contract',
+                file: f.path,
+                line: at,
+                title: `Callers of ${fn.name} still expect the old result`,
+                detail: `${fn.name} changed its contract: ${shift}; unchanged callers: ${list
+                    .slice(0, 3)
+                    .map((c) => `${c.file}:${c.line}`)
+                    .join(', ')}${list.length > 3 ? ` and ${list.length - 3} more` : ''}`,
+                scenario: `${list.length} unchanged caller${list.length === 1 ? '' : 's'} of ${fn.name} in ${files.length} file${files.length === 1 ? '' : 's'} ${list.length === 1 ? 'expects' : 'expect'} the old result and can fail at once.`,
+                fn: fn.name,
+                callers: list,
+            });
+        }
+    }
+}
+const ASSERTION = /\bexpect\s*\(|\bassert\w*(?:\.\w+)?\s*\(|\.toBe\w*\(|\.toEqual\(|\.toMatch\w*\(|\.toHave\w*\(|\.should\(/;
+/** Expected text that only holds at some times of day: a clock time, or a relative day word. Higher ranks first. */
+const CLOCK_EXPECT = [
+    [/\\d\\d:\\d\\d|\\d\{1,2\}:\\d|\bHH:mm\b|\btoLocaleTimeString\(|\bgetHours\(\)/, 2, 'a clock time'],
+    [/\b(?:today|yesterday|tomorrow|tonight|this (?:morning|week))\b/i, 1, 'a relative day'],
+    [/\btoLocaleDateString\(|\bgetDate\(\)|\bgetDay\(\)/, 1, 'a local date'],
+];
+/** A fixed clock or time zone in the test file. */
+const FIXED_CLOCK = /\bmock\.timers\b|\buseFakeTimers\b|\bsetSystemTime\b|\bfakeTimers\b|\bprocess\.env\.TZ\s*=|\bclock\.install\b|\btimekeeper\b|\bfreeze_time\b|\bfreezegun\b/;
+/** The test builds its data from the real clock. */
+const REAL_CLOCK = /\bDate\.now\(\)|\bnew Date\(\)|\bdatetime\.now\(|\btime\.time\(/;
+function timeDependentTest(x, out) {
+    for (const f of x.scope.files) {
+        if (f.class !== 'test' || f.status === 'removed')
+            continue;
+        const head = x.view.read(f.path) ?? [...f.added.values()].join('\n');
+        if (FIXED_CLOCK.test(head) || !REAL_CLOCK.test(head))
+            continue;
+        let best = null;
+        for (const [n, text] of sortedAdded(f)) {
+            if (!ASSERTION.test(text))
+                continue;
+            for (const [re, rank, what] of CLOCK_EXPECT) {
+                if (!re.test(text))
+                    continue;
+                if (!best || rank > best.rank)
+                    best = { line: n, rank, what };
+                break;
+            }
+        }
+        if (!best)
+            continue;
+        out.push({
+            id: '',
+            check: 'time_dependent_test',
+            file: f.path,
+            line: best.line,
+            title: 'Test fails at some times of day',
+            detail: `the assertion expects ${best.what} while the test data comes from the real clock and no fake clock or time zone is set`,
+            scenario: 'Just after midnight or in another time zone the label is a date, so the test fails in CI.',
+        });
+    }
+}
+const DETECTORS = [attackerChoice, pathSafety, deleteInFlight, changedContract, timeDependentTest];
+/** Runs the pass. Returns an empty pass (no triggers) when the diff touches none of the topics. */
+export function securityPass(x) {
+    const findings = [];
+    for (const d of DETECTORS)
+        d(x, findings);
+    // One lead per check and file, in file and line order; ids follow that order.
+    const seen = new Set();
+    const kept = findings
+        .sort((a, b) => (a.file < b.file ? -1 : a.file > b.file ? 1 : a.line - b.line))
+        .filter((f) => {
+        const k = `${f.check}\u0000${f.file}`;
+        if (seen.has(k))
+            return false;
+        seen.add(k);
+        return true;
+    })
+        .map((f, i) => ({ ...f, id: `f${i + 1}` }));
+    const triggers = topicsOf(x.scope, kept);
+    const topics = new Set(triggers.map((t) => t.topic));
+    const asked = SECURITY_CHECKLIST.filter((c) => c.topics.some((t) => topics.has(t)) || kept.some((f) => f.check === c.id)).map((c) => c.id);
+    return { triggers, asked, findings: kept };
+}
+/** Signal weight of a lead: a lead is a candidate risk, like a weight-3 pattern. */
+export const FINDING_WEIGHT = 3;
+/** A risk about the test itself (it fails by the clock): it never folds into a product risk as its coverage hole. */
+export function isTestOwnRisk(r) {
+    return r.source === 'security:time_dependent_test';
+}
+/** True for a risk of this pass: a risk to test, never a bug by itself. */
+export function isSecurityPassRisk(r) {
+    return r.kind === 'security' || r.kind === 'robustness' || (r.source ?? '').startsWith('security:');
+}
+//# sourceMappingURL=security.js.map

package/dist/review/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/review/security.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,EAAE;AACF,gGAAgG;AAChG,mGAAmG;AACnG,gGAAgG;AAChG,oGAAoG;AACpG,+FAA+F;AAC/F,yEAAyE;AACzE,EAAE;AACF,gGAAgG;AAChG,oDAAoD;AACpD,EAAE;AACF,0EAA0E;AAG1E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA8B5C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,+HAA+H;QACzI,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC;KACzD;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EACN,4JAA4J;QAC9J,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC;KACvD;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,iHAAiH;QAC3H,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,CAAC,SAAS,CAAC;KACpB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,sHAAsH;QAChI,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;KACxC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,8IAA8I;QACxJ,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,sGAAsG;QAChH,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,CAAC,cAAc,CAAC;KACzB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,gHAAgH;QAC1H,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,CAAC,gBAAgB,CAAC;KAC3B;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,kHAAkH;QAC5H,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAA+B,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAmB;IAC/C,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAE,CAAC;AACtD,CAAC;AAkCD,MAAM,CAAC,MAAM,WAAW,GAAkC;IACxD,YAAY,EAAE,mBAAmB;IACjC,YAAY,EAAE,uBAAuB;IACrC,UAAU,EAAE,6BAA6B;IACzC,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,0BAA0B;IACxC,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,0BAA0B;IAC3C,eAAe,EAAE,sCAAsC;CACxD,CAAC;AAEF,+BAA+B;AAE/B,MAAM,QAAQ,GAA8D;IAC1E,YAAY,EAAE,6IAA6I;IAC3J,YAAY,EAAE,qGAAqG;IACnH,UAAU,EACR,6NAA6N;IAC/N,WAAW,EAAE,wGAAwG;IACrH,YAAY,EAAE,qHAAqH;IACnI,OAAO,EAAE,uGAAuG;IAChH,YAAY,EAAE,yEAAyE;IACvF,cAAc,EAAE,qHAAqH;IACrI,eAAe,EAAE,4IAA4I;CAC9J,CAAC;AAEF,SAAS,SAAS,CAAC,KAAkB;IACnC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,WAAW,CAAC,CAAY;IAC/B,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAkB,EAAE,QAA2B;IAC/D,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAA8B,EAAE,CAAC;QACvE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,GAA0C,IAAI,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,KAAK,KAAK,gBAAgB,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM;gBAAE,SAAS;YAC/D,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC;gBACN,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,kBAAkB,CAAC,CAAC;IACtE,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kCAAkC;AAElC,gGAAgG;AAChG,MAAM,cAAc,GAClB,6JAA6J,CAAC;AAEhK,0GAA0G;AAC1G,MAAM,iBAAiB,GAA+B;IACpD,CAAC,6DAA6D,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACzF,CAAC,6CAA6C,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACvE,CAAC,uCAAuC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC9D,CAAC,6DAA6D,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3F,CAAC,uCAAuC,EAAE,gBAAgB,EAAE,CAAC,CAAC;CAC/D,CAAC;AAEF,oFAAoF;AACpF,MAAM,QAAQ,GAAG,wDAAwD,CAAC;AAE1E,mEAAmE;AACnE,MAAM,WAAW,GAAG,iFAAiF,CAAC;AAEtG,SAAS,cAAc,CAAC,CAAgB,EAAE,GAAsB;IAC9D,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uDAAuD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChJ,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAChE,IAAI,IAAI,GAAwD,IAAI,CAAC;QACrE,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,iBAAiB,EAAE,CAAC;gBACjD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC7B,uGAAuG;gBACvG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;gBAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACtF,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI;oBAAE,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC9D,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,4CAA4C;YACnD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,6HAA6H;YACjJ,QAAQ,EAAE,sFAAsF;SACjG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,SAAS,GAAG,uFAAuF,CAAC;AAC1G,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAC5D,+FAA+F;AAC/F,MAAM,SAAS,GAAG,uGAAuG,CAAC;AAE1H,SAAS,cAAc,CAAC,CAAgB,EAAE,GAAsB;IAC9D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,+GAA+G;QAC/G,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,EAAE,GAAG,CAAC;YAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvG,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACZ,KAAK,EAAE,iCAAiC,MAAM,aAAa;YAC3D,MAAM,EAAE,CAAC;gBACP,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,MAAM,2BAA2B,IAAI,uBAAuB;gBACrF,CAAC,CAAC,sBAAsB,IAAI,qCAAqC;YACnE,QAAQ,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,MAAM,uFAAuF;SACzI,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,GAAG,6FAA6F,CAAC;AACjH,yDAAyD;AACzD,MAAM,QAAQ,GAAG,wIAAwI,CAAC;AAC1J,+GAA+G;AAC/G,MAAM,OAAO,GAAG,2EAA2E,CAAC;AAE5F,SAAS,UAAU,CAAC,CAAgB,EAAE,GAAsB;IAC1D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,4FAA4F;QAC5F,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACZ,KAAK,EAAE,wCAAwC;YAC/C,MAAM,EAAE,GAAG,IAAI,8HAA8H;YAC7I,QAAQ,EAAE,mGAAmG;SAC9G,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CAAC,KAAe,EAAE,IAAY;IACpD,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,CAAC,GACL,mEAAmE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtJ,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,kFAAkF;QAClF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,kFAAkF;AAClF,MAAM,OAAO,GAAG,gIAAgI,CAAC;AACjJ,MAAM,cAAc,GAAG,yEAAyE,CAAC;AAEjG;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAa,EAAE,GAAa;IACjD,MAAM,MAAM,GAAG,CAAC,EAAY,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,wCAAwC,CAAC;IACjF,MAAM,MAAM,GAAG,CAAC,EAAY,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChF,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAChE,MAAM,IAAI,GAAG,CAAC,EAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1I,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,SAAS,eAAe,CAAC,CAAgB,EAAE,GAAsB;IAC/D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;YAAE,SAAS;QAC9D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM;gBAAE,SAAS;YACnC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YACpH,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM;gBAAE,SAAS;YACzC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAE,CAAC;YAC/E,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/E,MAAM,OAAO,GAAc,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxD,IAAI,IAAI,KAAK,IAAI;oBAAE,SAAS;gBAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBAChC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChB,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE;wBAAE,OAAO;oBAC3C,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;wBAAE,OAAO;oBAC9C,6DAA6D;oBAC7D,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;oBACtD,IAAI,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,OAAO;oBAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,SAAS;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,6DAA6D,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACnH,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,EAAE;gBACN,KAAK,EAAE,kBAAkB;gBACzB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,cAAc,EAAE,CAAC,IAAI,8BAA8B;gBAC1D,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,0BAA0B,KAAK,wBAAwB,IAAI;qBAC1E,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;qBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;qBACjC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBACvE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,oBAAoB,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,uCAAuC;gBACjO,EAAE,EAAE,EAAE,CAAC,IAAI;gBACX,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,0GAA0G,CAAC;AAC7H,oHAAoH;AACpH,MAAM,YAAY,GAA+B;IAC/C,CAAC,8EAA8E,EAAE,CAAC,EAAE,cAAc,CAAC;IACnG,CAAC,iEAAiE,EAAE,CAAC,EAAE,gBAAgB,CAAC;IACxF,CAAC,mDAAmD,EAAE,CAAC,EAAE,cAAc,CAAC;CACzE,CAAC;AACF,mDAAmD;AACnD,MAAM,WAAW,GACf,4JAA4J,CAAC;AAC/J,oDAAoD;AACpD,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAErF,SAAS,iBAAiB,CAAC,CAAgB,EAAE,GAAsB;IACjE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/D,IAAI,IAAI,GAAwD,IAAI,CAAC;QACrE,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;gBAC5C,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI;oBAAE,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC9D,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,qBAAqB;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,iCAAiC;YACxC,MAAM,EAAE,yBAAyB,IAAI,CAAC,IAAI,sFAAsF;YAChI,QAAQ,EAAE,2FAA2F;SACtG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAID,MAAM,SAAS,GAAe,CAAC,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;AAE/G,mGAAmG;AACnG,MAAM,UAAU,YAAY,CAAC,CAAgB;IAC3C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1C,8EAA8E;IAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,QAAQ;SAClB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;SAC9E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3I,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC,qHAAqH;AACrH,MAAM,UAAU,aAAa,CAAC,CAA6B;IACzD,OAAO,CAAC,CAAC,MAAM,KAAK,8BAA8B,CAAC;AACrD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,CAA2C;IAC5E,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACtG,CAAC"}