xypriss 9.11.13 → 9.12.0

package/dist/src/middleware/built-in/security/RequestSignatureProtector.d.ts

@@ -0,0 +1,128 @@
+/**
+ * XyRS - XyPriss Request Signature Protector
+ * Validates request signatures for API authentication
+ * Uses a predefined header name with developer-configured secret value
+ * Enhanced with robust validation and security measures
+ */
+import { Logger } from "../../../shared/logger/Logger";
+import { RequestSignatureConfig } from "./types";
+export declare class RequestSignatureProtector {
+    private config;
+    private readonly HEADER_NAME;
+    private logger;
+    private failedAttempts;
+    private readonly SECRET_HASH;
+    private readonly CLEANUP_INTERVAL;
+    private cleanupTimer?;
+    constructor(options: RequestSignatureConfig, logger?: Logger);
+    /**
+     * Get the request signature middleware function
+     */
+    getMiddleware(): (req: any, res: any, next: any) => void;
+    /**
+     * Handle incoming request and validate signature
+     */
+    private handleRequest;
+    /**
+     * Extract client identifier for rate limiting (IP-based)
+     */
+    private extractClientIdentifier;
+    /**
+     * Sanitize client identifier
+     */
+    private sanitizeClientId;
+    /**
+     * Strictly extract signature header with no fallbacks
+     */
+    private extractSignatureHeader;
+    /**
+     * Validate header length to prevent DoS attacks
+     */
+    private validateHeaderLength;
+    /**
+     * Detect suspicious patterns in header value
+     */
+    private containsSuspiciousPatterns;
+    /**
+     * Process signature value based on configuration
+     */
+    private processSignatureValue;
+    /**
+     * Compare signatures with optional timing-safe comparison
+     */
+    private compareSignatures;
+    /**
+     * Timing-safe string comparison to prevent timing attacks
+     */
+    private timingSafeEqual;
+    /**
+     * Check if client is currently blocked due to failed attempts
+     */
+    private isClientBlocked;
+    /**
+     * Record failed authentication attempt
+     */
+    private recordFailedAttempt;
+    /**
+     * Clear failed attempts for a client
+     */
+    private clearFailedAttempts;
+    /**
+     * Validate secret meets security requirements
+     */
+    private validateSecret;
+    /**
+     * Detect weak/predictable secrets
+     */
+    private isWeakSecret;
+    /**
+     * Hash secret for internal verification
+     */
+    private hashSecret;
+    /**
+     * Start cleanup timer for failed attempts
+     */
+    private startCleanupTimer;
+    /**
+     * Clean up expired failed attempt records
+     */
+    private cleanupExpiredAttempts;
+    /**
+     * Block the request with appropriate error response
+     */
+    private blockRequest;
+    /**
+     * Log security events
+     */
+    private logSecurityEvent;
+    /**
+     * Update configuration with strict validation
+     */
+    updateConfig(newConfig: Partial<RequestSignatureConfig>): void;
+    /**
+     * Get current configuration (without exposing the secret)
+     */
+    getConfig(): Omit<RequestSignatureConfig, "secret"> & {
+        hasSecret: boolean;
+    };
+    /**
+     * Get the header name used for signatures
+     */
+    getHeaderName(): string;
+    /**
+     * Validate if a signature would be accepted (for testing)
+     */
+    validateSignature(signature: string): boolean;
+    /**
+     * Get statistics about failed attempts (for monitoring)
+     */
+    getSecurityStats(): {
+        trackedClients: number;
+        blockedClients: number;
+    };
+    /**
+     * Cleanup resources
+     */
+    destroy(): void;
+}
+//# sourceMappingURL=RequestSignatureProtector.d.ts.map

package/dist/src/middleware/built-in/security/RequestSignatureProtector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestSignatureProtector.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/RequestSignatureProtector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAEvD,OAAO,EAAiB,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAGhE,qBAAa,yBAAyB;IAClC,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,cAAc,CAAyC;IAC/D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,MAAM;IA4C5D;;OAEG;IACI,aAAa,KACR,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;IAKzC;;OAEG;IACH,OAAO,CAAC,aAAa;IAiGrB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAsB9B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAclC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAI7B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAgBzB;;OAEG;IACH,OAAO,CAAC,eAAe;IAoBvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA6C3B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAI3B;;OAEG;IACH,OAAO,CAAC,cAAc;IA+BtB;;OAEG;IACH,OAAO,CAAC,YAAY;IAYpB;;OAEG;IACH,OAAO,CAAC,UAAU;IAMlB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAoB9B;;OAEG;IACH,OAAO,CAAC,YAAY;IA0CpB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;OAEG;IACI,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI;IAQrE;;OAEG;IACI,SAAS,IAAI,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,GAAG;QACzD,SAAS,EAAE,OAAO,CAAC;KACtB;IAmBD;;OAEG;IACI,aAAa,IAAI,MAAM;IAI9B;;OAEG;IACI,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAwBpD;;OAEG;IACI,gBAAgB,IAAI;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;KAC1B;IAgBD;;OAEG;IACI,OAAO,IAAI,IAAI;CAMzB"}

package/dist/src/middleware/built-in/security/RequestSignatureProtector.js

@@ -0,0 +1,463 @@
+/**
+ * XyRS - XyPriss Request Signature Protector
+ * Validates request signatures for API authentication
+ * Uses a predefined header name with developer-configured secret value
+ * Enhanced with robust validation and security measures
+ */
+import { Logger } from "../../../shared/logger/Logger";
+import * as crypto from "crypto";
+import { Cipher } from "xypriss-security";
+export class RequestSignatureProtector {
+    constructor(options, logger) {
+        this.failedAttempts = new Map();
+        this.CLEANUP_INTERVAL = 60000; // 1 minute
+        this.HEADER_NAME = options.headerName || "XP-Request-Sig";
+        // Strict validation of required secret
+        this.validateSecret(options.secret, options.minSecretLength);
+        this.config = {
+            errorMessage: "Invalid or missing request signature",
+            statusCode: 401,
+            debug: false,
+            caseSensitive: true,
+            trimValue: true,
+            maxHeaderLength: 512,
+            maxFailedAttempts: 5,
+            blockDuration: 15 * 60 * 1000, // 15 minutes
+            disableRateLimiting: false,
+            rateLimitScaleFactor: 1.0,
+            minSecretLength: 32,
+            timingSafeComparison: true,
+            rejectSuspiciousPatterns: true,
+            ...options,
+        };
+        // Store hashed version of secret for additional security
+        this.SECRET_HASH = this.hashSecret(this.config.secret);
+        // Initialize logger
+        this.logger =
+            logger ||
+                new Logger({
+                    enabled: true,
+                    level: "debug",
+                    components: { security: true },
+                    types: { debug: true },
+                });
+        // Start cleanup timer for failed attempts tracking
+        this.startCleanupTimer();
+        this.logSecurityEvent("info", "XyRS initialized with strict validation");
+    }
+    /**
+     * Get the request signature middleware function
+     */
+    getMiddleware() {
+        return (req, res, next) => {
+            this.handleRequest(req, res, next);
+        };
+    }
+    /**
+     * Handle incoming request and validate signature
+     */
+    handleRequest(req, res, next) {
+        const clientId = this.extractClientIdentifier(req);
+        // Check if client is currently blocked (if rate limiting is enabled)
+        if (!this.config.disableRateLimiting &&
+            this.isClientBlocked(clientId)) {
+            return this.blockRequest(res, "RATE_LIMITED", "Too many failed authentication attempts. Temporarily blocked.", clientId);
+        }
+        if (this.config.debug) {
+            this.logger.debug("security", "XyRS validating request signature");
+        }
+        // Strict header extraction
+        const signature = this.extractSignatureHeader(req);
+        if (signature === null) {
+            this.recordFailedAttempt(clientId);
+            return this.blockRequest(res, "MISSING_SIGNATURE", `Required header '${this.HEADER_NAME}' is missing or malformed`, clientId);
+        }
+        // Length validation to prevent DoS
+        if (!this.validateHeaderLength(signature)) {
+            this.recordFailedAttempt(clientId);
+            return this.blockRequest(res, "INVALID_HEADER_LENGTH", `Header value exceeds maximum allowed length`, clientId);
+        }
+        // Suspicious pattern detection
+        if (this.config.rejectSuspiciousPatterns &&
+            this.containsSuspiciousPatterns(signature)) {
+            this.recordFailedAttempt(clientId);
+            return this.blockRequest(res, "SUSPICIOUS_PATTERN", `Header contains suspicious or malicious patterns`, clientId);
+        }
+        // Process signature value
+        const processedSignature = this.processSignatureValue(signature);
+        const expectedSignature = this.processSignatureValue(this.config.secret);
+        // Validate signature with timing-safe comparison
+        const isValid = this.compareSignatures(processedSignature, expectedSignature);
+        // console.log({ processedSignature, expectedSignature });
+        if (!isValid) {
+            this.recordFailedAttempt(clientId);
+            this.logSecurityEvent("warning", "Invalid signature attempt", {
+                clientId,
+                signatureLength: signature.length,
+            });
+            return this.blockRequest(res, "INVALID_SIGNATURE", `Header '${this.HEADER_NAME}' value does not match expected signature`, clientId, { processedSignature, expectedSignature });
+        }
+        // Signature is valid - clear any failed attempts
+        this.clearFailedAttempts(clientId);
+        if (this.config.debug) {
+            this.logger.debug("security", "XyRS signature validation passed");
+        }
+        next();
+    }
+    /**
+     * Extract client identifier for rate limiting (IP-based)
+     */
+    extractClientIdentifier(req) {
+        // Try multiple methods to get real IP
+        const ip = req.ip ||
+            req.headers["x-forwarded-for"]?.split(",")[0]?.trim() ||
+            req.headers["x-real-ip"] ||
+            req.connection?.remoteAddress ||
+            req.socket?.remoteAddress ||
+            "unknown";
+        return this.sanitizeClientId(ip);
+    }
+    /**
+     * Sanitize client identifier
+     */
+    sanitizeClientId(clientId) {
+        // Remove IPv6 prefix if present
+        let sanitized = clientId.replace(/^::ffff:/, "");
+        // Keep only alphanumeric, dots, colons, and hyphens
+        sanitized = sanitized.replace(/[^a-zA-Z0-9.:_-]/g, "");
+        return sanitized || "unknown";
+    }
+    /**
+     * Strictly extract signature header with no fallbacks
+     */
+    extractSignatureHeader(req) {
+        if (!req.headers || typeof req.headers !== "object") {
+            return null;
+        }
+        // Only check lowercase version (standard HTTP header convention)
+        const headerKey = this.HEADER_NAME.toLowerCase();
+        const signature = req.headers[headerKey];
+        // Strict type checking
+        if (typeof signature !== "string") {
+            return null;
+        }
+        // Reject empty or whitespace-only headers
+        if (signature.length === 0 || /^\s*$/.test(signature)) {
+            return null;
+        }
+        return signature;
+    }
+    /**
+     * Validate header length to prevent DoS attacks
+     */
+    validateHeaderLength(signature) {
+        return (signature.length > 0 &&
+            signature.length <= (this.config.maxHeaderLength || 512));
+    }
+    /**
+     * Detect suspicious patterns in header value
+     */
+    containsSuspiciousPatterns(signature) {
+        // Check for common attack patterns
+        const suspiciousPatterns = [
+            /[<>\"'`]/g, // HTML/Script injection characters
+            /\.\./g, // Path traversal
+            /[\x00-\x08\x0B\x0C\x0E-\x1F]/g, // Control characters
+            /\${.*}/g, // Template injection
+            /\|\||&&/g, // Command injection
+            /(\r\n|\n|\r)/g, // CRLF injection
+        ];
+        return suspiciousPatterns.some((pattern) => pattern.test(signature));
+    }
+    /**
+     * Process signature value based on configuration
+     */
+    processSignatureValue(value) {
+        return this.config.trimValue ? value.trim() : value;
+    }
+    /**
+     * Compare signatures with optional timing-safe comparison
+     */
+    compareSignatures(received, expected) {
+        // Always check lengths first (fast rejection)
+        if (received.length !== expected.length) {
+            return false;
+        }
+        if (this.config.timingSafeComparison) {
+            return this.timingSafeEqual(received, expected);
+        }
+        // Standard comparison
+        return this.config.caseSensitive
+            ? received === expected
+            : received.toLowerCase() === expected.toLowerCase();
+    }
+    /**
+     * Timing-safe string comparison to prevent timing attacks
+     */
+    timingSafeEqual(a, b) {
+        // Convert to buffers for timing-safe comparison
+        const bufA = Buffer.from(this.config.caseSensitive ? a : a.toLowerCase());
+        const bufB = Buffer.from(this.config.caseSensitive ? b : b.toLowerCase());
+        if (bufA.length !== bufB.length) {
+            return false;
+        }
+        try {
+            return crypto.timingSafeEqual(bufA, bufB);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Check if client is currently blocked due to failed attempts
+     */
+    isClientBlocked(clientId) {
+        const attempt = this.failedAttempts.get(clientId);
+        if (!attempt || !attempt.blockedUntil) {
+            return false;
+        }
+        const now = Date.now();
+        if (now >= attempt.blockedUntil) {
+            // Block period expired
+            this.failedAttempts.delete(clientId);
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Record failed authentication attempt
+     */
+    recordFailedAttempt(clientId) {
+        // Skip recording if rate limiting is disabled
+        if (this.config.disableRateLimiting) {
+            return;
+        }
+        const now = Date.now();
+        const attempt = this.failedAttempts.get(clientId) || {
+            count: 0,
+            blockedUntil: null,
+            lastAttempt: now,
+        };
+        attempt.count += 1;
+        attempt.lastAttempt = now;
+        // Calculate scaled thresholds
+        const scaledMaxFailedAttempts = Math.ceil((this.config.maxFailedAttempts || 5) *
+            (this.config.rateLimitScaleFactor || 1.0));
+        const scaledBlockDuration = Math.ceil((this.config.blockDuration || 900000) *
+            (this.config.rateLimitScaleFactor || 1.0));
+        // Block if threshold exceeded
+        if (attempt.count >= scaledMaxFailedAttempts) {
+            attempt.blockedUntil = now + scaledBlockDuration;
+            this.logSecurityEvent("warning", "Client blocked due to failed attempts", {
+                clientId,
+                attempts: attempt.count,
+                blockedUntil: new Date(attempt.blockedUntil).toISOString(),
+                scaledMaxFailedAttempts,
+                scaledBlockDuration,
+            });
+        }
+        this.failedAttempts.set(clientId, attempt);
+    }
+    /**
+     * Clear failed attempts for a client
+     */
+    clearFailedAttempts(clientId) {
+        this.failedAttempts.delete(clientId);
+    }
+    /**
+     * Validate secret meets security requirements
+     */
+    validateSecret(secret, minLength) {
+        const minLen = minLength || 32;
+        if (!secret || typeof secret !== "string") {
+            throw new Error("RequestSignatureProtector: secret is required and must be a string");
+        }
+        const trimmedSecret = secret.trim();
+        if (trimmedSecret.length === 0) {
+            throw new Error("RequestSignatureProtector: secret cannot be empty or whitespace-only");
+        }
+        if (trimmedSecret.length < minLen) {
+            throw new Error(`RequestSignatureProtector: secret must be at least ${minLen} characters long (current: ${trimmedSecret.length})`);
+        }
+        // Check for weak secrets
+        if (this.isWeakSecret(trimmedSecret)) {
+            throw new Error("RequestSignatureProtector: secret appears to be weak. Use a cryptographically strong random value.");
+        }
+    }
+    /**
+     * Detect weak/predictable secrets
+     */
+    isWeakSecret(secret) {
+        const weakPatterns = [
+            /^[0-9]+$/, // Only numbers
+            /^[a-zA-Z]+$/, // Only letters
+            /^(.)\1+$/, // Repeated character
+            /^(123|abc|password|secret|key|test|demo|admin)/i, // Common words
+            /^[a-f0-9]{32}$/i, // Looks like MD5 (weak)
+        ];
+        return weakPatterns.some((pattern) => pattern.test(secret));
+    }
+    /**
+     * Hash secret for internal verification
+     */
+    hashSecret(secret) {
+        return Cipher.hash
+            .create(secret, { algorithm: "sha256" })
+            .toString("hex");
+    }
+    /**
+     * Start cleanup timer for failed attempts
+     */
+    startCleanupTimer() {
+        this.cleanupTimer = setInterval(() => {
+            this.cleanupExpiredAttempts();
+        }, this.CLEANUP_INTERVAL);
+        // Don't keep process alive for cleanup
+        if (this.cleanupTimer.unref) {
+            this.cleanupTimer.unref();
+        }
+    }
+    /**
+     * Clean up expired failed attempt records
+     */
+    cleanupExpiredAttempts() {
+        const now = Date.now();
+        const expiredClients = [];
+        for (const [clientId, attempt] of this.failedAttempts.entries()) {
+            // Remove if block expired and no recent attempts
+            if (attempt.blockedUntil &&
+                now >= attempt.blockedUntil &&
+                now - attempt.lastAttempt > this.CLEANUP_INTERVAL) {
+                expiredClients.push(clientId);
+            }
+        }
+        expiredClients.forEach((clientId) => this.failedAttempts.delete(clientId));
+    }
+    /**
+     * Block the request with appropriate error response
+     */
+    blockRequest(res, code, details, clientId, metadata) {
+        const isDevelopment = this.config.debug;
+        const response = {
+            error: isDevelopment
+                ? this.config.errorMessage
+                : "Authentication required",
+            timestamp: new Date().toISOString(),
+            code: "NEHONIX_XYRS_001",
+        };
+        // Add detailed info only in debug mode
+        if (isDevelopment) {
+            response.xyrs = {
+                module: "RequestSignature",
+                code,
+                details,
+                requiredHeader: this.HEADER_NAME,
+                hint: "Include the X-XyRS header with your configured secret value",
+            };
+        }
+        // console.log("metadata: ", metadata);
+        if (this.config.debug && clientId) {
+            this.logger.debug("security", "XyRS blocking request", {
+                code,
+                details,
+                clientId,
+                requiredHeader: this.HEADER_NAME,
+                ...metadata,
+            });
+        }
+        res.status(this.config.statusCode).json(response);
+    }
+    /**
+     * Log security events
+     */
+    logSecurityEvent(level, message, metadata) {
+        if (this.config.debug) {
+            const logMethod = level === "error"
+                ? "error"
+                : level === "warning"
+                    ? "warn"
+                    : "debug";
+            this.logger[logMethod]("security", message, metadata);
+        }
+    }
+    /**
+     * Update configuration with strict validation
+     */
+    updateConfig(newConfig) {
+        if (newConfig.secret !== undefined) {
+            this.validateSecret(newConfig.secret, newConfig.minSecretLength);
+        }
+        this.config = { ...this.config, ...newConfig };
+    }
+    /**
+     * Get current configuration (without exposing the secret)
+     */
+    getConfig() {
+        return {
+            errorMessage: this.config.errorMessage,
+            statusCode: this.config.statusCode,
+            debug: this.config.debug,
+            caseSensitive: this.config.caseSensitive,
+            trimValue: this.config.trimValue,
+            hasSecret: !!this.config.secret,
+            maxHeaderLength: this.config.maxHeaderLength,
+            maxFailedAttempts: this.config.maxFailedAttempts,
+            blockDuration: this.config.blockDuration,
+            disableRateLimiting: this.config.disableRateLimiting,
+            rateLimitScaleFactor: this.config.rateLimitScaleFactor,
+            minSecretLength: this.config.minSecretLength,
+            timingSafeComparison: this.config.timingSafeComparison,
+            rejectSuspiciousPatterns: this.config.rejectSuspiciousPatterns,
+        };
+    }
+    /**
+     * Get the header name used for signatures
+     */
+    getHeaderName() {
+        return this.HEADER_NAME;
+    }
+    /**
+     * Validate if a signature would be accepted (for testing)
+     */
+    validateSignature(signature) {
+        if (!signature || typeof signature !== "string") {
+            return false;
+        }
+        if (!this.validateHeaderLength(signature)) {
+            return false;
+        }
+        if (this.config.rejectSuspiciousPatterns &&
+            this.containsSuspiciousPatterns(signature)) {
+            return false;
+        }
+        const processedSignature = this.processSignatureValue(signature);
+        const expectedSignature = this.processSignatureValue(this.config.secret);
+        return this.compareSignatures(processedSignature, expectedSignature);
+    }
+    /**
+     * Get statistics about failed attempts (for monitoring)
+     */
+    getSecurityStats() {
+        const now = Date.now();
+        let blockedCount = 0;
+        for (const attempt of this.failedAttempts.values()) {
+            if (attempt.blockedUntil && now < attempt.blockedUntil) {
+                blockedCount++;
+            }
+        }
+        return {
+            trackedClients: this.failedAttempts.size,
+            blockedClients: blockedCount,
+        };
+    }
+    /**
+     * Cleanup resources
+     */
+    destroy() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+        }
+        this.failedAttempts.clear();
+    }
+}
+//# sourceMappingURL=RequestSignatureProtector.js.map

package/dist/src/middleware/built-in/security/RequestSignatureProtector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestSignatureProtector.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/RequestSignatureProtector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,OAAO,yBAAyB;IASlC,YAAY,OAA+B,EAAE,MAAe;QALpD,mBAAc,GAA+B,IAAI,GAAG,EAAE,CAAC;QAE9C,qBAAgB,GAAG,KAAK,CAAC,CAAC,WAAW;QAIlD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC;QAE1D,uCAAuC;QACvC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,GAAG;YACV,YAAY,EAAE,sCAAsC;YACpD,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,GAAG;YACpB,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;YAC5C,mBAAmB,EAAE,KAAK;YAC1B,oBAAoB,EAAE,GAAG;YACzB,eAAe,EAAE,EAAE;YACnB,oBAAoB,EAAE,IAAI;YAC1B,wBAAwB,EAAE,IAAI;YAC9B,GAAG,OAAO;SACb,CAAC;QACF,yDAAyD;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvD,oBAAoB;QACpB,IAAI,CAAC,MAAM;YACP,MAAM;gBACN,IAAI,MAAM,CAAC;oBACP,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,OAAO;oBACd,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC9B,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC,CAAC;QAEP,mDAAmD;QACnD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,CAAC,gBAAgB,CACjB,MAAM,EACN,yCAAyC,CAC5C,CAAC;IACN,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAEnD,qEAAqE;QACrE,IACI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAChC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAChC,CAAC;YACC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,cAAc,EACd,+DAA+D,EAC/D,QAAQ,CACX,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QACvE,CAAC;QAED,2BAA2B;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAEnD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,mBAAmB,EACnB,oBAAoB,IAAI,CAAC,WAAW,2BAA2B,EAC/D,QAAQ,CACX,CAAC;QACN,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,uBAAuB,EACvB,6CAA6C,EAC7C,QAAQ,CACX,CAAC;QACN,CAAC;QAED,+BAA+B;QAC/B,IACI,IAAI,CAAC,MAAM,CAAC,wBAAwB;YACpC,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAC5C,CAAC;YACC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,oBAAoB,EACpB,kDAAkD,EAClD,QAAQ,CACX,CAAC;QACN,CAAC;QAED,0BAA0B;QAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC;QAEF,iDAAiD;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAClC,kBAAkB,EAClB,iBAAiB,CACpB,CAAC;QAEF,0DAA0D;QAE1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,2BAA2B,EAAE;gBAC1D,QAAQ;gBACR,eAAe,EAAE,SAAS,CAAC,MAAM;aACpC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,mBAAmB,EACnB,WAAW,IAAI,CAAC,WAAW,2CAA2C,EACtE,QAAQ,EACR,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAC5C,CAAC;QACN,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,EAAE,CAAC;IACX,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,GAAQ;QACpC,sCAAsC;QACtC,MAAM,EAAE,GACJ,GAAG,CAAC,EAAE;YACN,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YACrD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACxB,GAAG,CAAC,UAAU,EAAE,aAAa;YAC7B,GAAG,CAAC,MAAM,EAAE,aAAa;YACzB,SAAS,CAAC;QAEd,OAAO,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,QAAgB;QACrC,gCAAgC;QAChC,IAAI,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACjD,oDAAoD;QACpD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,SAAS,IAAI,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,GAAQ;QACnC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,iEAAiE;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEzC,uBAAuB;QACvB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,0CAA0C;QAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,SAAiB;QAC1C,OAAO,CACH,SAAS,CAAC,MAAM,GAAG,CAAC;YACpB,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC,CAC3D,CAAC;IACN,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,SAAiB;QAChD,mCAAmC;QACnC,MAAM,kBAAkB,GAAG;YACvB,WAAW,EAAE,mCAAmC;YAChD,OAAO,EAAE,iBAAiB;YAC1B,+BAA+B,EAAE,qBAAqB;YACtD,SAAS,EAAE,qBAAqB;YAChC,UAAU,EAAE,oBAAoB;YAChC,eAAe,EAAE,iBAAiB;SACrC,CAAC;QAEF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAAa;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB,EAAE,QAAgB;QACxD,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,sBAAsB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa;YAC5B,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACvB,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,CAAS,EAAE,CAAS;QACxC,gDAAgD;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAClD,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAClD,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC;YACD,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,QAAgB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9B,uBAAuB;YACvB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,QAAgB;QACxC,8CAA8C;QAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAClC,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;YACjD,KAAK,EAAE,CAAC;YACR,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,GAAG;SACnB,CAAC;QAEF,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACnB,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC;QAE1B,8BAA8B;QAC9B,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CACrC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,CAAC;YAChC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAChD,CAAC;QACF,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CACjC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC;YACjC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAChD,CAAC;QAEF,8BAA8B;QAC9B,IAAI,OAAO,CAAC,KAAK,IAAI,uBAAuB,EAAE,CAAC;YAC3C,OAAO,CAAC,YAAY,GAAG,GAAG,GAAG,mBAAmB,CAAC;YACjD,IAAI,CAAC,gBAAgB,CACjB,SAAS,EACT,uCAAuC,EACvC;gBACI,QAAQ;gBACR,QAAQ,EAAE,OAAO,CAAC,KAAK;gBACvB,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;gBAC1D,uBAAuB;gBACvB,mBAAmB;aACtB,CACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,QAAgB;QACxC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,MAAW,EAAE,SAAkB;QAClD,MAAM,MAAM,GAAG,SAAS,IAAI,EAAE,CAAC;QAE/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACX,oEAAoE,CACvE,CAAC;QACN,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAEpC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACX,sEAAsE,CACzE,CAAC;QACN,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACX,sDAAsD,MAAM,8BAA8B,aAAa,CAAC,MAAM,GAAG,CACpH,CAAC;QACN,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACX,oGAAoG,CACvG,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAc;QAC/B,MAAM,YAAY,GAAG;YACjB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,qBAAqB;YACjC,iDAAiD,EAAE,eAAe;YAClE,iBAAiB,EAAE,wBAAwB;SAC9C,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,MAAc;QAC7B,OAAO,MAAM,CAAC,IAAI;aACb,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;aACvC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAClC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE1B,uCAAuC;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACL,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,iDAAiD;YACjD,IACI,OAAO,CAAC,YAAY;gBACpB,GAAG,IAAI,OAAO,CAAC,YAAY;gBAC3B,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,gBAAgB,EACnD,CAAC;gBACC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QAED,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CACvC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,YAAY,CAChB,GAAQ,EACR,IAAY,EACZ,OAAgB,EAChB,QAAiB,EACjB,QAAc;QAEd,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAExC,MAAM,QAAQ,GAAQ;YAClB,KAAK,EAAE,aAAa;gBAChB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;gBAC1B,CAAC,CAAC,yBAAyB;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,kBAAkB;SAC3B,CAAC;QAEF,uCAAuC;QACvC,IAAI,aAAa,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,GAAG;gBACZ,MAAM,EAAE,kBAAkB;gBAC1B,IAAI;gBACJ,OAAO;gBACP,cAAc,EAAE,IAAI,CAAC,WAAW;gBAChC,IAAI,EAAE,6DAA6D;aACtE,CAAC;QACN,CAAC;QAED,uCAAuC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,EAAE;gBACnD,IAAI;gBACJ,OAAO;gBACP,QAAQ;gBACR,cAAc,EAAE,IAAI,CAAC,WAAW;gBAChC,GAAG,QAAQ;aACd,CAAC,CAAC;QACP,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACK,gBAAgB,CACpB,KAAmC,EACnC,OAAe,EACf,QAAc;QAEd,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,SAAS,GACX,KAAK,KAAK,OAAO;gBACb,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,KAAK,KAAK,SAAS;oBACnB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,CAAC,MAAc,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;IACL,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,SAA0C;QAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACI,SAAS;QAGZ,OAAO;YACH,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACtD,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACtD,wBAAwB,EAAE,IAAI,CAAC,MAAM,CAAC,wBAAwB;SACjE,CAAC;IACN,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,SAAiB;QACtC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IACI,IAAI,CAAC,MAAM,CAAC,wBAAwB;YACpC,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAC5C,CAAC;YACC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC;QAEF,OAAO,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACI,gBAAgB;QAInB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,YAAY,IAAI,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;gBACrD,YAAY,EAAE,CAAC;YACnB,CAAC;QACL,CAAC;QAED,OAAO;YACH,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;YACxC,cAAc,EAAE,YAAY;SAC/B,CAAC;IACN,CAAC;IAED;;OAEG;IACI,OAAO;QACV,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACJ"}