vesper-memory 0.3.0

package/dist/middleware/auth.js

@@ -0,0 +1,610 @@
+/**
+ * MCP Authentication Middleware
+ *
+ * Implements API key authentication for MCP tools with:
+ * - Bearer token authentication
+ * - bcrypt password hashing
+ * - Key expiration
+ * - IP allowlisting
+ * - Scope-based authorization
+ * - Audit logging
+ *
+ * Security Features:
+ * - Constant-time comparison via bcrypt
+ * - No plaintext key storage
+ * - Gradual rollout support (AUTH_ENABLED env var)
+ * - Rate limit tier enforcement
+ */
+import { randomBytes, createHash } from "crypto";
+import bcrypt from "bcrypt";
+// =============================================================================
+// Constants
+// =============================================================================
+/** API key format prefix */
+export const API_KEY_PREFIX = "mem_v1_";
+/** Number of random bytes for key generation (30 bytes = 40 chars base64url) */
+export const API_KEY_BYTES = 30;
+/** bcrypt work factor (12 = ~250ms on modern hardware) */
+export const BCRYPT_ROUNDS = 12;
+/** Default key expiration in days */
+export const DEFAULT_KEY_EXPIRATION_DAYS = 90;
+/** Maximum allowed key expiration in days */
+export const MAX_KEY_EXPIRATION_DAYS = 365;
+/** Maximum grace period for key rotation in hours */
+export const MAX_GRACE_PERIOD_HOURS = 168; // 7 days
+/** Valid scopes for API keys */
+export const VALID_SCOPES = [
+    "store_memory",
+    "retrieve_memory",
+    "list_recent",
+    "get_stats",
+    "*", // Wildcard for all permissions
+];
+/** Audit log actions */
+export var AuditAction;
+(function (AuditAction) {
+    AuditAction["AUTHENTICATE"] = "authenticate";
+    AuditAction["RATE_LIMITED"] = "rate_limited";
+    AuditAction["REVOKED"] = "revoked";
+    AuditAction["ROTATED"] = "rotated";
+    AuditAction["CREATED"] = "created";
+    AuditAction["SCOPE_DENIED"] = "scope_denied";
+    AuditAction["IP_DENIED"] = "ip_denied";
+    AuditAction["EXPIRED"] = "expired";
+})(AuditAction || (AuditAction = {}));
+// =============================================================================
+// API Key Generation
+// =============================================================================
+/**
+ * Generate a new API key with cryptographically secure random bytes
+ *
+ * @returns Generated key with full key, prefix, and hash
+ */
+export async function generateApiKey() {
+    // Generate cryptographically secure random bytes
+    const randomPart = randomBytes(API_KEY_BYTES).toString("base64url").slice(0, 40);
+    const fullKey = `${API_KEY_PREFIX}${randomPart}`;
+    // Extract prefix for database lookup (first 8 chars after prefix)
+    const keyPrefix = randomPart.slice(0, 8);
+    // Hash with bcrypt for secure storage
+    const keyHash = await bcrypt.hash(fullKey, BCRYPT_ROUNDS);
+    return {
+        fullKey,
+        keyPrefix,
+        keyHash,
+    };
+}
+// =============================================================================
+// API Key Verification
+// =============================================================================
+/**
+ * Verify an API key against its stored hash
+ *
+ * Uses bcrypt.compare for constant-time comparison
+ *
+ * @param providedKey - The API key provided by the client
+ * @param storedHash - The bcrypt hash stored in the database
+ * @returns true if key is valid
+ */
+export async function verifyApiKey(providedKey, storedHash) {
+    if (!providedKey || !storedHash) {
+        return false;
+    }
+    // bcrypt.compare provides constant-time comparison
+    return bcrypt.compare(providedKey, storedHash);
+}
+/**
+ * Validate API key format without database lookup
+ *
+ * @param key - API key to validate
+ * @returns true if format is valid
+ */
+export function validateApiKeyFormat(key) {
+    if (!key || typeof key !== "string") {
+        return false;
+    }
+    // Must start with correct prefix
+    if (!key.startsWith(API_KEY_PREFIX)) {
+        return false;
+    }
+    // Must have exactly 40 characters after prefix
+    const keyPart = key.slice(API_KEY_PREFIX.length);
+    if (keyPart.length !== 40) {
+        return false;
+    }
+    // Must be valid base64url characters
+    return /^[A-Za-z0-9_-]+$/.test(keyPart);
+}
+/**
+ * Extract the prefix from an API key for database lookup
+ *
+ * @param key - Full API key
+ * @returns 8-character prefix or null if invalid
+ */
+export function extractKeyPrefix(key) {
+    if (!validateApiKeyFormat(key)) {
+        return null;
+    }
+    return key.slice(API_KEY_PREFIX.length, API_KEY_PREFIX.length + 8);
+}
+// =============================================================================
+// Expiration Handling
+// =============================================================================
+/**
+ * Check if an API key is expired
+ *
+ * @param expiresAt - Expiration date (null means never expires)
+ * @returns true if key is expired
+ */
+export function isKeyExpired(expiresAt) {
+    if (expiresAt === null) {
+        return false;
+    }
+    return new Date() > expiresAt;
+}
+/**
+ * Calculate default expiration date (90 days from now)
+ *
+ * @returns Expiration date
+ */
+export function calculateDefaultExpiration() {
+    const expiration = new Date();
+    expiration.setDate(expiration.getDate() + DEFAULT_KEY_EXPIRATION_DAYS);
+    return expiration;
+}
+/**
+ * Calculate expiration date with custom days (capped at max)
+ *
+ * @param days - Number of days until expiration
+ * @returns Expiration date
+ */
+export function calculateExpiration(days) {
+    const cappedDays = Math.min(days, MAX_KEY_EXPIRATION_DAYS);
+    const expiration = new Date();
+    expiration.setDate(expiration.getDate() + cappedDays);
+    return expiration;
+}
+/**
+ * Get expiration days from environment or default
+ *
+ * @returns Number of days for key expiration
+ */
+export function getExpirationDays() {
+    const envDays = process.env.API_KEY_EXPIRATION_DAYS;
+    if (envDays) {
+        const parsed = parseInt(envDays, 10);
+        if (!isNaN(parsed) && parsed > 0) {
+            return Math.min(parsed, MAX_KEY_EXPIRATION_DAYS);
+        }
+    }
+    return DEFAULT_KEY_EXPIRATION_DAYS;
+}
+// =============================================================================
+// IP Allowlisting
+// =============================================================================
+/**
+ * Check if an IP address is in the allowlist
+ *
+ * Supports both individual IPs and CIDR notation
+ *
+ * @param ip - Client IP address
+ * @param allowlist - Array of allowed IPs/CIDRs (empty or null allows all)
+ * @returns true if IP is allowed
+ */
+export function isIpAllowed(ip, allowlist) {
+    // Empty or null allowlist means all IPs are allowed
+    if (!allowlist || allowlist.length === 0) {
+        return true;
+    }
+    // Normalize IP for comparison
+    const normalizedIp = normalizeIp(ip);
+    for (const allowed of allowlist) {
+        if (matchIp(normalizedIp, allowed)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Normalize an IP address for comparison
+ */
+function normalizeIp(ip) {
+    // Handle IPv4-mapped IPv6 addresses
+    if (ip.startsWith("::ffff:")) {
+        return ip.slice(7);
+    }
+    return ip;
+}
+/**
+ * Check if an IP matches an allowed pattern (IP or CIDR)
+ */
+function matchIp(ip, allowed) {
+    // Check for CIDR notation
+    if (allowed.includes("/")) {
+        return matchCidr(ip, allowed);
+    }
+    // Exact match
+    return normalizeIp(ip) === normalizeIp(allowed);
+}
+/**
+ * Check if an IP matches a CIDR range
+ */
+function matchCidr(ip, cidr) {
+    const [range, bits] = cidr.split("/");
+    const mask = parseInt(bits, 10);
+    // Handle IPv6
+    if (ip.includes(":") || range.includes(":")) {
+        return matchCidrIpv6(ip, range, mask);
+    }
+    // IPv4 CIDR matching
+    const ipNum = ipv4ToNumber(ip);
+    const rangeNum = ipv4ToNumber(range);
+    const maskNum = ~((1 << (32 - mask)) - 1);
+    return (ipNum & maskNum) === (rangeNum & maskNum);
+}
+/**
+ * Convert IPv4 address to number for CIDR matching
+ */
+function ipv4ToNumber(ip) {
+    const parts = ip.split(".").map((p) => parseInt(p, 10));
+    return (parts[0] << 24) | (parts[1] << 16) | (parts[2] << 8) | parts[3];
+}
+/**
+ * Match IPv6 CIDR (simplified implementation)
+ */
+function matchCidrIpv6(ip, range, mask) {
+    // Expand both addresses to full form
+    const ipFull = expandIpv6(ip);
+    const rangeFull = expandIpv6(range);
+    // Compare the required number of bits
+    const bitsToCompare = Math.ceil(mask / 4);
+    const ipHex = ipFull.replace(/:/g, "");
+    const rangeHex = rangeFull.replace(/:/g, "");
+    return ipHex.slice(0, bitsToCompare) === rangeHex.slice(0, bitsToCompare);
+}
+/**
+ * Expand IPv6 address to full form
+ */
+function expandIpv6(ip) {
+    // Handle :: expansion
+    if (ip.includes("::")) {
+        const [left, right] = ip.split("::");
+        const leftParts = left ? left.split(":") : [];
+        const rightParts = right ? right.split(":") : [];
+        const missing = 8 - leftParts.length - rightParts.length;
+        const middle = Array(missing).fill("0000");
+        const parts = [...leftParts, ...middle, ...rightParts];
+        return parts.map((p) => p.padStart(4, "0")).join(":");
+    }
+    return ip
+        .split(":")
+        .map((p) => p.padStart(4, "0"))
+        .join(":");
+}
+// =============================================================================
+// Scope Enforcement
+// =============================================================================
+/**
+ * Check if user has required scope
+ *
+ * @param userScopes - Scopes granted to user
+ * @param requiredScope - Scope required for operation
+ * @returns true if user has scope
+ */
+export function hasScope(userScopes, requiredScope) {
+    if (!userScopes || userScopes.length === 0) {
+        return false;
+    }
+    // Wildcard grants all permissions
+    if (userScopes.includes("*")) {
+        return true;
+    }
+    return userScopes.includes(requiredScope);
+}
+// =============================================================================
+// Key Rotation
+// =============================================================================
+/**
+ * Rotate an API key with optional grace period
+ *
+ * @param oldKeyHash - Hash of the old key (unused, for signature compatibility)
+ * @param gracePeriodHours - Hours to allow old key (0 = immediate revocation)
+ * @returns New key and grace period info
+ */
+export async function rotateApiKey(_oldKeyHash, gracePeriodHours) {
+    // Cap grace period
+    const cappedGracePeriod = Math.min(gracePeriodHours, MAX_GRACE_PERIOD_HOURS);
+    // Generate new key
+    const newKey = await generateApiKey();
+    // Calculate when old key becomes invalid
+    const oldKeyValidUntil = new Date();
+    oldKeyValidUntil.setTime(oldKeyValidUntil.getTime() + cappedGracePeriod * 60 * 60 * 1000);
+    return {
+        newKey,
+        gracePeriodHours: cappedGracePeriod,
+        oldKeyValidUntil,
+    };
+}
+// =============================================================================
+// Audit Logging
+// =============================================================================
+/**
+ * Create an audit log entry
+ *
+ * @param params - Audit entry parameters
+ * @returns Audit entry object
+ */
+export function createAuditEntry(params) {
+    return {
+        ...params,
+        createdAt: new Date(),
+    };
+}
+/**
+ * Hash an API key for audit logging (never log full key)
+ *
+ * @param key - Full API key
+ * @returns Truncated SHA-256 hash for identification
+ */
+export function hashForAudit(key) {
+    return createHash("sha256").update(key).digest("hex").slice(0, 16);
+}
+// =============================================================================
+// Authentication Middleware
+// =============================================================================
+/**
+ * Authenticate an MCP request
+ *
+ * @param request - Request context
+ * @param db - Database interface
+ * @returns Authentication result
+ * @throws Error if authentication fails
+ */
+export async function authenticateRequest(request, db) {
+    const { apiKey, ip, toolName } = request;
+    // Check if API key is provided
+    if (!apiKey) {
+        throw new Error("API key required");
+    }
+    // Validate format
+    if (!validateApiKeyFormat(apiKey)) {
+        await db.createAuditEntry(createAuditEntry({
+            apiKeyId: null,
+            action: AuditAction.AUTHENTICATE,
+            success: false,
+            ipAddress: ip,
+            failureReason: "Invalid API key format",
+        }));
+        throw new Error("Invalid API key");
+    }
+    // Extract prefix for lookup
+    const prefix = extractKeyPrefix(apiKey);
+    if (!prefix) {
+        throw new Error("Invalid API key");
+    }
+    // Look up key in database
+    const keyRecord = await db.getApiKey(prefix);
+    if (!keyRecord) {
+        await db.createAuditEntry(createAuditEntry({
+            apiKeyId: null,
+            action: AuditAction.AUTHENTICATE,
+            success: false,
+            ipAddress: ip,
+            failureReason: "API key not found",
+        }));
+        throw new Error("Invalid API key");
+    }
+    // Check if key is revoked
+    if (keyRecord.revokedAt) {
+        await db.createAuditEntry(createAuditEntry({
+            apiKeyId: keyRecord.id,
+            action: AuditAction.AUTHENTICATE,
+            success: false,
+            ipAddress: ip,
+            failureReason: "API key revoked",
+        }));
+        throw new Error("API key has been revoked");
+    }
+    // Verify key hash
+    const isValid = await verifyApiKey(apiKey, keyRecord.keyHash);
+    if (!isValid) {
+        await db.createAuditEntry(createAuditEntry({
+            apiKeyId: keyRecord.id,
+            action: AuditAction.AUTHENTICATE,
+            success: false,
+            ipAddress: ip,
+            failureReason: "Invalid API key",
+        }));
+        throw new Error("Invalid API key");
+    }
+    // Check expiration
+    if (isKeyExpired(keyRecord.expiresAt)) {
+        await db.createAuditEntry(createAuditEntry({
+            apiKeyId: keyRecord.id,
+            action: AuditAction.EXPIRED,
+            success: false,
+            ipAddress: ip,
+            failureReason: "API key expired",
+        }));
+        throw new Error("API key expired");
+    }
+    // Check IP allowlist
+    if (!isIpAllowed(ip, keyRecord.ipAllowlist)) {
+        await db.createAuditEntry(createAuditEntry({
+            apiKeyId: keyRecord.id,
+            action: AuditAction.IP_DENIED,
+            success: false,
+            ipAddress: ip,
+            failureReason: `IP ${ip} not in allowlist`,
+        }));
+        throw new Error("IP address not allowed");
+    }
+    // Check scope
+    if (!hasScope(keyRecord.scopes, toolName)) {
+        await db.createAuditEntry(createAuditEntry({
+            apiKeyId: keyRecord.id,
+            action: AuditAction.SCOPE_DENIED,
+            success: false,
+            ipAddress: ip,
+            failureReason: `Missing scope: ${toolName}`,
+        }));
+        throw new Error("Insufficient permissions");
+    }
+    // Update last used timestamp
+    await db.updateLastUsed(keyRecord.id);
+    // Log successful authentication
+    await db.createAuditEntry(createAuditEntry({
+        apiKeyId: keyRecord.id,
+        action: AuditAction.AUTHENTICATE,
+        success: true,
+        ipAddress: ip,
+        requestPath: toolName,
+        userAgent: request.userAgent,
+    }));
+    return {
+        authenticated: true,
+        userId: keyRecord.userId,
+        keyId: keyRecord.id,
+        tier: keyRecord.tier,
+        scopes: keyRecord.scopes,
+    };
+}
+// =============================================================================
+// Environment Configuration
+// =============================================================================
+/**
+ * Check if authentication is enabled
+ *
+ * @returns true if AUTH_ENABLED=true
+ */
+export function isAuthEnabled() {
+    return process.env.AUTH_ENABLED === "true";
+}
+// =============================================================================
+// Rate Limit Tiers
+// =============================================================================
+/** Default rate limits per tier */
+const TIER_RATE_LIMITS = {
+    standard: {
+        store_memory: 100,
+        retrieve_memory: 300,
+        list_recent: 60,
+        get_stats: 30,
+    },
+    premium: {
+        store_memory: 500,
+        retrieve_memory: 1000,
+        list_recent: 200,
+        get_stats: 100,
+    },
+    unlimited: {
+        store_memory: 2000,
+        retrieve_memory: 5000,
+        list_recent: 500,
+        get_stats: 300,
+    },
+};
+/**
+ * Get rate limits for a tier
+ *
+ * @param tier - Rate limit tier
+ * @returns Rate limits for the tier
+ */
+export function getRateLimitsForTier(tier) {
+    return TIER_RATE_LIMITS[tier] || TIER_RATE_LIMITS.standard;
+}
+// =============================================================================
+// Auth Cache
+// =============================================================================
+/**
+ * Create an in-memory cache for auth results
+ *
+ * @param options - Cache configuration
+ * @returns Cache object with get/set methods
+ */
+export function createAuthCache(options) {
+    const cache = new Map();
+    const { maxSize, ttlSeconds } = options;
+    return {
+        get(keyId) {
+            const entry = cache.get(keyId);
+            if (!entry) {
+                return null;
+            }
+            // Check TTL
+            if (Date.now() > entry.expiresAt) {
+                cache.delete(keyId);
+                return null;
+            }
+            return { userId: entry.userId, tier: entry.tier };
+        },
+        set(keyId, value) {
+            // Evict oldest if at max size
+            if (cache.size >= maxSize) {
+                const firstKey = cache.keys().next().value;
+                if (firstKey) {
+                    cache.delete(firstKey);
+                }
+            }
+            cache.set(keyId, {
+                userId: value.userId,
+                tier: value.tier,
+                expiresAt: Date.now() + ttlSeconds * 1000,
+            });
+        },
+        /**
+         * Invalidate a specific key from the cache
+         * HIGH-002: Used to immediately invalidate revoked/rotated keys
+         *
+         * @param keyId - The key ID (prefix) to invalidate
+         * @returns true if key was in cache, false otherwise
+         */
+        invalidate(keyId) {
+            return cache.delete(keyId);
+        },
+        clear() {
+            cache.clear();
+        },
+        size() {
+            return cache.size;
+        },
+    };
+}
+/**
+ * Revoke an API key and invalidate it from cache
+ * HIGH-002: Ensures revoked keys cannot be used even if cached
+ *
+ * @param keyPrefix - The key prefix to revoke
+ * @param cache - The auth cache instance
+ * @param reason - Reason for revocation (for audit logging)
+ * @returns true if key was invalidated from cache
+ */
+export function revokeApiKey(keyPrefix, cache, reason = "manual_revocation") {
+    console.error(`[INFO] Revoking API key: ${keyPrefix.slice(0, 4)}... (reason: ${reason})`);
+    // Invalidate from cache immediately
+    const wasInCache = cache.invalidate(keyPrefix);
+    if (wasInCache) {
+        console.error(`[INFO] Key ${keyPrefix.slice(0, 4)}... invalidated from cache`);
+    }
+    // In production, this would also update the PostgreSQL revoked_at timestamp
+    // UPDATE api_keys SET revoked_at = NOW() WHERE key_prefix = $1
+    return wasInCache;
+}
+/**
+ * Invalidate a rotated API key from cache
+ * HIGH-002: Ensures old keys cannot be used during rotation
+ *
+ * @param oldKeyPrefix - The old key prefix being rotated
+ * @param cache - The auth cache instance
+ * @returns true if old key was invalidated from cache
+ */
+export function invalidateRotatedKey(oldKeyPrefix, cache) {
+    console.error(`[INFO] Invalidating rotated key: ${oldKeyPrefix.slice(0, 4)}...`);
+    // Invalidate old key from cache immediately
+    const wasInCache = cache.invalidate(oldKeyPrefix);
+    if (wasInCache) {
+        console.error(`[INFO] Old key ${oldKeyPrefix.slice(0, 4)}... invalidated from cache`);
+    }
+    return wasInCache;
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,4BAA4B;AAC5B,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,qCAAqC;AACrC,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C,6CAA6C;AAC7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC,CAAC,SAAS;AAEpD,gCAAgC;AAChC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,cAAc;IACd,iBAAiB;IACjB,aAAa;IACb,WAAW;IACX,GAAG,EAAE,+BAA+B;CAC5B,CAAC;AAqCX,wBAAwB;AACxB,MAAM,CAAN,IAAY,WASX;AATD,WAAY,WAAW;IACrB,4CAA6B,CAAA;IAC7B,4CAA6B,CAAA;IAC7B,kCAAmB,CAAA;IACnB,kCAAmB,CAAA;IACnB,kCAAmB,CAAA;IACnB,4CAA6B,CAAA;IAC7B,sCAAuB,CAAA;IACvB,kCAAmB,CAAA;AACrB,CAAC,EATW,WAAW,KAAX,WAAW,QAStB;AAoDD,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,iDAAiD;IACjD,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,GAAG,cAAc,GAAG,UAAU,EAAE,CAAC;IAEjD,kEAAkE;IAClE,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEzC,sCAAsC;IACtC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAE1D,OAAO;QACL,OAAO;QACP,SAAS;QACT,OAAO;KACR,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,UAAkB;IAElB,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mDAAmD;IACnD,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+CAA+C;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qCAAqC;IACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,SAAsB;IACjD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,IAAI,EAAE,GAAG,SAAS,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,2BAA2B,CAAC,CAAC;IACvE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,EAAU,EACV,SAAsC;IAEtC,oDAAoD;IACpD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,EAAU;IAC7B,oCAAoC;IACpC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,SAAS,OAAO,CAAC,EAAU,EAAE,OAAe;IAC1C,0BAA0B;IAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,cAAc;IACd,OAAO,WAAW,CAAC,EAAE,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY;IACzC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAEhC,cAAc;IACd,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB;IACrB,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1C,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,EAAU,EAAE,KAAa,EAAE,IAAY;IAC5D,qCAAqC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAEpC,sCAAsC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE7C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,EAAU;IAC5B,sBAAsB;IACtB,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACzD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE;SACN,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,UAAuC,EACvC,aAAqB;IAErB,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kCAAkC;IAClC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,gBAAwB;IAExB,mBAAmB;IACnB,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IAE7E,mBAAmB;IACnB,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IAEtC,yCAAyC;IACzC,MAAM,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,gBAAgB,CAAC,OAAO,CACtB,gBAAgB,CAAC,OAAO,EAAE,GAAG,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAChE,CAAC;IAEF,OAAO;QACL,MAAM;QACN,gBAAgB,EAAE,iBAAiB;QACnC,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAShC;IACC,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAoB,EACpB,EAAgB;IAEhB,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEzC,+BAA+B;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;YACf,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,WAAW,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,wBAAwB;SACxC,CAAC,CACH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,4BAA4B;IAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;YACf,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,WAAW,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,mBAAmB;SACnC,CAAC,CACH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,0BAA0B;IAC1B,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;YACf,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,MAAM,EAAE,WAAW,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,iBAAiB;SACjC,CAAC,CACH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;YACf,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,MAAM,EAAE,WAAW,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,iBAAiB;SACjC,CAAC,CACH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,mBAAmB;IACnB,IAAI,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;YACf,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,MAAM,EAAE,WAAW,CAAC,OAAO;YAC3B,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,iBAAiB;SACjC,CAAC,CACH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;YACf,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,MAAM,EAAE,WAAW,CAAC,SAAS;YAC7B,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,MAAM,EAAE,mBAAmB;SAC3C,CAAC,CACH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,cAAc;IACd,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;YACf,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,MAAM,EAAE,WAAW,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,kBAAkB,QAAQ,EAAE;SAC5C,CAAC,CACH,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,6BAA6B;IAC7B,MAAM,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEtC,gCAAgC;IAChC,MAAM,EAAE,CAAC,gBAAgB,CACvB,gBAAgB,CAAC;QACf,QAAQ,EAAE,SAAS,CAAC,EAAE;QACtB,MAAM,EAAE,WAAW,CAAC,YAAY;QAChC,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CACH,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,SAAS,CAAC,EAAE;QACnB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,mCAAmC;AACnC,MAAM,gBAAgB,GAAmC;IACvD,QAAQ,EAAE;QACR,YAAY,EAAE,GAAG;QACjB,eAAe,EAAE,GAAG;QACpB,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,EAAE;KACd;IACD,OAAO,EAAE;QACP,YAAY,EAAE,GAAG;QACjB,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,GAAG;KACf;IACD,SAAS,EAAE;QACT,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,GAAG;KACf;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC;AAC7D,CAAC;AAED,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgD;IAC9E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAExC,OAAO;QACL,GAAG,CAAC,KAAa;YACf,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YACd,CAAC;YAED,YAAY;YACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,GAAG,CAAC,KAAa,EAAE,KAAuC;YACxD,8BAA8B;YAC9B,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAC3C,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE;gBACf,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI;aAC1C,CAAC,CAAC;QACL,CAAC;QAED;;;;;;WAMG;QACH,UAAU,CAAC,KAAa;YACtB,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK;YACH,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,KAAgB,EAChB,SAAiB,mBAAmB;IAEpC,OAAO,CAAC,KAAK,CAAC,4BAA4B,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,MAAM,GAAG,CAAC,CAAC;IAE1F,oCAAoC;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAE/C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACjF,CAAC;IAED,4EAA4E;IAC5E,+DAA+D;IAE/D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,KAAgB;IAEhB,OAAO,CAAC,KAAK,CAAC,oCAAoC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAEjF,4CAA4C;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAElD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kBAAkB,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}