ysk-server-core 1.0.0

package/dist/hosting/cdn/ssl.js

@@ -0,0 +1,593 @@
+/**
+ * CDN SSL: resolve certs, LE issue (http-01), distribute PEM to edges (PR-C6).
+ * Honesty: certbot success ≠ all edges TLS-ready until distribute+reload.
+ */
+import { existsSync, mkdirSync, copyFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+import { findCertForDomain, resolveManagedCertPaths } from '../ssl-certs.js';
+import { planLetsEncrypt } from '../nginx-ssl.js';
+import { applyCdnSiteEdgeRender } from './edge-render.js';
+import { fanOutCdnSite } from './fan-out.js';
+import { getCdnNode } from './nodes.js';
+import { getCdnSite, upsertCdnSite } from './sites.js';
+/** Edge-local cert directory */
+export function edgeCertDir(siteId) {
+    return `/etc/ysk-cdn/certs/${siteId}`;
+}
+export function edgeSslPaths(siteId) {
+    const dir = edgeCertDir(siteId);
+    return {
+        fullchain: `${dir}/fullchain.pem`,
+        privkey: `${dir}/privkey.pem`,
+        acmeWebroot: `/var/www/ysk-cdn-acme/${siteId}`,
+        redirectHttp: true
+    };
+}
+/**
+ * Resolve source certificate files for a CDN site.
+ */
+export function resolveCdnSiteCertificate(input) {
+    const notes = [];
+    const primary = input.site.domains[0];
+    if (!primary) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0042'), { httpStatus: 400 });
+    }
+    // By certId
+    if (input.site.ssl?.certId) {
+        const row = input.db.snapshot.certificates.find((c) => String(c.id) === input.site.ssl.certId);
+        if (row) {
+            const domain = String(row.domain ?? primary);
+            const managed = resolveManagedCertPaths(input.dataDir, domain);
+            const fullchain = managed.exists
+                ? managed.fullchain
+                : String(row.fullchain_path ?? '');
+            const privkey = managed.exists
+                ? managed.privkey
+                : String(row.privkey_path ?? '');
+            if (fullchain && privkey && existsSync(fullchain) && existsSync(privkey)) {
+                return {
+                    ok: true,
+                    domain,
+                    fullchain,
+                    privkey,
+                    provider: row.provider === 'letsencrypt' ? 'letsencrypt' : 'upload',
+                    certId: String(row.id),
+                    notes: [tl('notes.auto.t0714', { v0: String(row.id), v1: String(domain) })]
+                };
+            }
+            notes.push(tl('notes.auto.t0715', { v0: String(row.id), v1: String(fullchain) }));
+        }
+        else {
+            notes.push(tl('notes.auto.t0716', { v0: (input.site.ssl.certId) }));
+        }
+    }
+    // Match primary domain in store / disk
+    for (const d of input.site.domains) {
+        const managed = resolveManagedCertPaths(input.dataDir, d);
+        if (managed.exists) {
+            const row = findCertForDomain(input.db, d);
+            return {
+                ok: true,
+                domain: d,
+                fullchain: managed.fullchain,
+                privkey: managed.privkey,
+                provider: row?.provider === 'letsencrypt' ? 'letsencrypt' : 'upload',
+                certId: row?.id,
+                notes: [tl('notes.auto.t0717', { v0: (d) })]
+            };
+        }
+        const leFull = `/etc/letsencrypt/live/${d}/fullchain.pem`;
+        const leKey = `/etc/letsencrypt/live/${d}/privkey.pem`;
+        if (existsSync(leFull) && existsSync(leKey)) {
+            return {
+                ok: true,
+                domain: d,
+                fullchain: leFull,
+                privkey: leKey,
+                provider: 'letsencrypt',
+                notes: [tl('notes.auto.t0718', { v0: (d) })]
+            };
+        }
+    }
+    return {
+        ok: false,
+        domain: primary,
+        fullchain: '',
+        privkey: '',
+        provider: 'unknown',
+        notes: [
+            ...notes,
+            tl('notes.auto.n0858'),
+        ]
+    };
+}
+function resolveSshTarget(node) {
+    const host = node.sshHost?.trim() ||
+        node.publicIpv4[0] ||
+        (node.baseUrl
+            ? (() => {
+                try {
+                    return new URL(node.baseUrl).hostname;
+                }
+                catch {
+                    return '';
+                }
+            })()
+            : '');
+    if (!host)
+        return null;
+    return {
+        host,
+        port: node.sshPort && node.sshPort > 0 ? node.sshPort : 22,
+        username: node.sshUsername?.trim() || 'root'
+    };
+}
+function isLocalEdge(node) {
+    const t = resolveSshTarget(node);
+    if (!t)
+        return true;
+    const h = t.host.toLowerCase();
+    return h === '127.0.0.1' || h === 'localhost' || h === '::1';
+}
+async function resolveIdentityPath(dataDir, identityId) {
+    if (!identityId || !dataDir)
+        return undefined;
+    try {
+        const { resolveIdentityKeyPath } = await import('../../security/ssh-identity/ops.js');
+        const r = resolveIdentityKeyPath(dataDir, identityId);
+        return r.ok ? r.path : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function scpFile(host, local, target, remotePath, identityPath) {
+    const argv = [
+        'scp',
+        ...(identityPath
+            ? [
+                '-i',
+                identityPath,
+                '-o',
+                'IdentitiesOnly=yes',
+                '-o',
+                'BatchMode=yes',
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+            ]
+            : ['-o', 'StrictHostKeyChecking=no', '-o', 'BatchMode=yes']),
+        '-P',
+        String(target.port),
+        local,
+        `${target.username}@${target.host}:${remotePath}`,
+    ];
+    const r = await host.runCommand(argv, { timeoutMs: 60_000 });
+    if (r.exitCode !== 0) {
+        return {
+            ok: false,
+            note: tl('notes.auto.t0719', { v0: ((r.stderr || r.stdout).slice(0, 100)) })
+        };
+    }
+    return { ok: true, note: `scp → ${remotePath}` };
+}
+/**
+ * Copy fullchain+privkey to every edge; re-render TLS conf; optional fan-out.
+ */
+export async function distributeCdnSiteSsl(input) {
+    const site = getCdnSite(input.db, input.siteId);
+    if (!site) {
+        throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.cdn.siteNotFound'), {
+            httpStatus: 404
+        });
+    }
+    if (!input.host.executeEnabled()) {
+        return {
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            apply_status: 'blocked',
+            siteId: site.id,
+            notes: [tl('notes.auto.n1146')],
+            edges: [],
+            edge_status: {}
+        };
+    }
+    const cert = resolveCdnSiteCertificate({
+        db: input.db,
+        dataDir: input.dataDir,
+        site
+    });
+    if (!cert.ok) {
+        return {
+            ok: false,
+            apply_status: 'failed',
+            siteId: site.id,
+            notes: cert.notes,
+            edges: [],
+            edge_status: {},
+            cert
+        };
+    }
+    const notes = [...cert.notes];
+    const remoteDir = edgeCertDir(site.id);
+    const edges = [];
+    const edge_status = { ...site.edge_status };
+    const edgeIds = site.edgeNodeIds.filter((id) => !input.edgeNodeId || id === input.edgeNodeId);
+    // Stage copy under dataDir for local edges
+    const localStage = join(input.dataDir, 'cdn', 'sites', site.id, 'certs');
+    mkdirSync(localStage, { recursive: true });
+    const stageFull = join(localStage, 'fullchain.pem');
+    const stageKey = join(localStage, 'privkey.pem');
+    copyFileSync(cert.fullchain, stageFull);
+    copyFileSync(cert.privkey, stageKey);
+    for (const eid of edgeIds) {
+        const node = getCdnNode(input.db, eid);
+        if (!node) {
+            edges.push({
+                edgeNodeId: eid,
+                name: eid,
+                apply_status: 'failed',
+                method: 'skip',
+                notes: [tl('notes.cdn.nodeMissing')]
+            });
+            edge_status[eid] = 'failed';
+            continue;
+        }
+        if (input.skipDraining !== false && node.status === 'draining') {
+            edges.push({
+                edgeNodeId: eid,
+                name: node.name,
+                apply_status: 'planned',
+                method: 'skip',
+                notes: [tl('notes.auto.n0043')]
+            });
+            continue;
+        }
+        if (isLocalEdge(node)) {
+            try {
+                mkdirSync(remoteDir, { recursive: true });
+                copyFileSync(stageFull, `${remoteDir}/fullchain.pem`);
+                copyFileSync(stageKey, `${remoteDir}/privkey.pem`);
+                // also ensure acme webroot
+                mkdirSync(`/var/www/ysk-cdn-acme/${site.id}`, { recursive: true });
+                edges.push({
+                    edgeNodeId: eid,
+                    name: node.name,
+                    apply_status: 'written',
+                    method: 'local',
+                    notes: [`local certs → ${remoteDir}`]
+                });
+                notes.push(`${node.name}: certs written local`);
+            }
+            catch (e) {
+                edges.push({
+                    edgeNodeId: eid,
+                    name: node.name,
+                    apply_status: 'failed',
+                    method: 'local',
+                    notes: [e instanceof Error ? e.message : String(e)]
+                });
+                edge_status[eid] = 'failed';
+            }
+            continue;
+        }
+        const target = resolveSshTarget(node);
+        if (!target) {
+            edges.push({
+                edgeNodeId: eid,
+                name: node.name,
+                apply_status: 'failed',
+                method: 'skip',
+                notes: [tl('notes.auto.n1065')]
+            });
+            edge_status[eid] = 'failed';
+            continue;
+        }
+        const identityPath = await resolveIdentityPath(input.dataDir, node.sshIdentityId);
+        // mkdir remote
+        const mk = await input.host.runCommand([
+            'ssh',
+            ...(identityPath
+                ? [
+                    '-i',
+                    identityPath,
+                    '-o',
+                    'IdentitiesOnly=yes',
+                    '-o',
+                    'BatchMode=yes',
+                    '-o',
+                    'StrictHostKeyChecking=accept-new',
+                ]
+                : ['-o', 'StrictHostKeyChecking=no', '-o', 'BatchMode=yes']),
+            '-p',
+            String(target.port),
+            `${target.username}@${target.host}`,
+            'bash',
+            '-lc',
+            `mkdir -p ${JSON.stringify(remoteDir)} ${JSON.stringify(`/var/www/ysk-cdn-acme/${site.id}`)} && chmod 755 ${JSON.stringify(remoteDir)}`,
+        ], { timeoutMs: 20_000 });
+        if (mk.exitCode !== 0) {
+            edges.push({
+                edgeNodeId: eid,
+                name: node.name,
+                apply_status: 'failed',
+                method: 'ssh',
+                notes: [tl('notes.auto.t0720', { v0: ((mk.stderr || mk.stdout).slice(0, 80)) })]
+            });
+            edge_status[eid] = 'failed';
+            continue;
+        }
+        const a = await scpFile(input.host, stageFull, target, `${remoteDir}/fullchain.pem`, identityPath);
+        const b = await scpFile(input.host, stageKey, target, `${remoteDir}/privkey.pem`, identityPath);
+        // tighten key perms
+        await input.host.runCommand([
+            'ssh',
+            ...(identityPath
+                ? ['-i', identityPath, '-o', 'IdentitiesOnly=yes', '-o', 'BatchMode=yes']
+                : ['-o', 'BatchMode=yes']),
+            '-o',
+            'StrictHostKeyChecking=accept-new',
+            '-p',
+            String(target.port),
+            `${target.username}@${target.host}`,
+            'bash',
+            '-lc',
+            `chmod 644 ${JSON.stringify(`${remoteDir}/fullchain.pem`)} && chmod 600 ${JSON.stringify(`${remoteDir}/privkey.pem`)}`,
+        ], { timeoutMs: 15_000 });
+        const ok = a.ok && b.ok;
+        edges.push({
+            edgeNodeId: eid,
+            name: node.name,
+            apply_status: ok ? 'written' : 'failed',
+            method: 'ssh',
+            notes: [a.note, b.note]
+        });
+        edge_status[eid] = ok ? 'written' : 'failed';
+        notes.push(`${node.name}@${target.host}: ${ok ? 'certs ok' : 'certs fail'}`);
+    }
+    // Bind certId on site if resolved
+    if (cert.certId && site.ssl.certId !== cert.certId) {
+        upsertCdnSite(input.db, {
+            ...site,
+            name: site.name,
+            ssl: {
+                mode: site.ssl.mode === 'off' ? 'upload' : site.ssl.mode,
+                certId: cert.certId
+            }
+        });
+    }
+    // Re-render with TLS paths
+    const sslPaths = edgeSslPaths(site.id);
+    await applyCdnSiteEdgeRender({
+        db: input.db,
+        dataDir: input.dataDir,
+        siteId: site.id,
+        host: input.host,
+        sslPaths
+    });
+    notes.push(tl('notes.auto.n0809'));
+    if (input.applyNginx !== false) {
+        const fo = await fanOutCdnSite({
+            db: input.db,
+            host: input.host,
+            dataDir: input.dataDir,
+            siteId: site.id,
+            edgeNodeId: input.edgeNodeId,
+            skipDraining: input.skipDraining,
+            renderFirst: false,
+            enqueue: input.enqueue
+        });
+        notes.push(...fo.notes.map((n) => `nginx: ${n}`));
+        // merge edge status: cert written + nginx applied
+        for (const e of fo.edges) {
+            const prev = edges.find((x) => x.edgeNodeId === e.edgeNodeId);
+            if (prev && prev.apply_status !== 'failed') {
+                if (e.apply_status === 'applied') {
+                    prev.apply_status = 'applied';
+                    prev.reloaded = e.reloaded;
+                    prev.notes.push(...e.notes);
+                }
+                else if (e.apply_status === 'failed') {
+                    prev.apply_status = 'partial';
+                    prev.notes.push(...e.notes);
+                }
+                else {
+                    prev.notes.push(...e.notes);
+                }
+            }
+            edge_status[e.edgeNodeId] = prev?.apply_status ?? e.apply_status;
+        }
+        notes.push(...fo.notes.slice(-3));
+    }
+    const applied = edges.filter((e) => e.apply_status === 'applied').length;
+    const writtenN = edges.filter((e) => e.apply_status === 'written').length;
+    const failed = edges.filter((e) => e.apply_status === 'failed').length;
+    let apply_status;
+    let ok;
+    if (applied === edges.length && edges.length > 0) {
+        apply_status = 'applied';
+        ok = true;
+    }
+    else if (applied + writtenN > 0 && failed < edges.length) {
+        apply_status = applied > 0 ? 'partial' : 'written';
+        ok = applied > 0 || writtenN === edges.length;
+    }
+    else {
+        apply_status = 'failed';
+        ok = false;
+    }
+    notes.push(tl('notes.tpl.sslDistributeNote'));
+    return {
+        ok,
+        apply_status,
+        siteId: site.id,
+        notes,
+        edges,
+        edge_status,
+        cert
+    };
+}
+/**
+ * Prepare ACME HTTP conf (webroot) and fan-out — step before certbot.
+ */
+export async function prepareCdnSiteAcme(input) {
+    if (!input.host.executeEnabled()) {
+        return {
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            apply_status: 'blocked',
+            siteId: input.siteId,
+            notes: [tl('notes.auto.n1176')],
+            edges: [],
+            edge_status: {}
+        };
+    }
+    const site = getCdnSite(input.db, input.siteId);
+    if (!site) {
+        throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.cdn.siteNotFound'), {
+            httpStatus: 404
+        });
+    }
+    mkdirSync(`/var/www/ysk-cdn-acme/${site.id}`, { recursive: true });
+    await applyCdnSiteEdgeRender({
+        db: input.db,
+        dataDir: input.dataDir,
+        siteId: site.id,
+        host: input.host,
+        acmeOnly: true,
+        sslPaths: {
+            fullchain: '',
+            privkey: '',
+            acmeWebroot: `/var/www/ysk-cdn-acme/${site.id}`
+        }
+    });
+    return fanOutCdnSite({
+        db: input.db,
+        host: input.host,
+        dataDir: input.dataDir,
+        siteId: site.id,
+        renderFirst: false,
+        enqueue: input.enqueue
+    });
+}
+/**
+ * Issue Let’s Encrypt (http-01 preferred) on control plane, then distribute.
+ */
+export async function issueCdnSiteLetsEncrypt(input) {
+    const site = getCdnSite(input.db, input.siteId);
+    if (!site) {
+        throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.cdn.siteNotFound'), {
+            httpStatus: 404
+        });
+    }
+    const email = input.email.trim();
+    if (!email || !email.includes('@')) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n1578'), {
+            httpStatus: 400
+        });
+    }
+    const mode = site.ssl?.mode || 'le_http01';
+    const primary = site.domains[0];
+    const notes = [];
+    const commands = [];
+    if (mode === 'le_dns01' || primary.startsWith('*.')) {
+        const plan = planLetsEncrypt({
+            domain: primary.startsWith('*.') ? primary : `*.${primary}`,
+            email,
+            provider: 'letsencrypt',
+            challenge: 'dns-01'
+        });
+        commands.push(...plan.commands);
+        notes.push(...plan.notes);
+        notes.push(tl('notes.auto.n0253'));
+        return {
+            ok: true,
+            apply_status: 'planned',
+            siteId: site.id,
+            notes,
+            commands,
+            executed: false
+        };
+    }
+    // http-01 via webroot
+    const webroot = `/var/www/ysk-cdn-acme/${site.id}`;
+    const dFlags = site.domains.map((d) => `-d ${d}`).join(' ');
+    const cmd = `certbot certonly --webroot -w ${webroot} ${dFlags} --email ${email} --agree-tos --non-interactive --keep-until-expiring`;
+    commands.push(cmd);
+    notes.push(tl('notes.auto.n0304'));
+    if (input.run === false) {
+        return {
+            ok: true,
+            apply_status: 'planned',
+            siteId: site.id,
+            notes: [...notes, 'dry plan only（run=false）'],
+            commands,
+            executed: false
+        };
+    }
+    if (!input.host.executeEnabled()) {
+        return {
+            ok: false,
+            blocked: true,
+            requiresExecute: true,
+            apply_status: 'blocked',
+            siteId: site.id,
+            notes: [tl('notes.auto.n1158')],
+            commands
+        };
+    }
+    // Prepare ACME conf first
+    const prep = await prepareCdnSiteAcme({
+        db: input.db,
+        host: input.host,
+        dataDir: input.dataDir,
+        siteId: site.id
+    });
+    notes.push(...prep.notes.map((n) => `acme-prep: ${n}`));
+    mkdirSync(webroot, { recursive: true });
+    const r = await input.host.runCommand(['bash', '-c', cmd], {
+        timeoutMs: 180_000
+    });
+    const executed = true;
+    if (r.exitCode !== 0) {
+        notes.push(tl('notes.auto.t0721', { v0: ((r.stderr || r.stdout).slice(0, 200)) }));
+        return {
+            ok: false,
+            apply_status: 'failed',
+            siteId: site.id,
+            notes,
+            commands,
+            executed
+        };
+    }
+    notes.push(tl('notes.auto.n0236'));
+    // Point site ssl mode
+    upsertCdnSite(input.db, {
+        ...site,
+        name: site.name,
+        ssl: { mode: 'le_http01', certId: site.ssl?.certId }
+    });
+    let dist;
+    if (input.distribute !== false) {
+        dist = await distributeCdnSiteSsl({
+            db: input.db,
+            host: input.host,
+            dataDir: input.dataDir,
+            siteId: site.id,
+            enqueue: input.enqueue
+        });
+        notes.push(...dist.notes.map((n) => `distribute: ${n}`));
+    }
+    return {
+        ok: dist ? dist.ok : true,
+        apply_status: dist?.apply_status ?? 'written',
+        siteId: site.id,
+        notes,
+        commands,
+        executed,
+        distribute: dist
+    };
+}
+//# sourceMappingURL=ssl.js.map

package/dist/hosting/cdn/ssl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl.js","sourceRoot":"","sources":["../../../src/hosting/cdn/ssl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,UAAU,EACV,QAAQ,EAGU,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACA,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,aAAa,EAA+C,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAYvD,gCAAgC;AAChC,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,sBAAsB,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO;QACL,SAAS,EAAE,GAAG,GAAG,gBAAgB;QACjC,OAAO,EAAE,GAAG,GAAG,cAAc;QAC7B,WAAW,EAAE,yBAAyB,MAAM,EAAE;QAC9C,YAAY,EAAE,IAAI;KAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,YAAY;IACZ,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAI,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,YAA+C,CAAC,IAAI,CACjF,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAC9C,CAAC;QACF,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM;gBAC9B,CAAC,CAAC,OAAO,CAAC,SAAS;gBACnB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM;gBAC5B,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YACnC,IAAI,SAAS,IAAI,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,MAAM;oBACN,SAAS;oBACT,OAAO;oBACP,QAAQ,EACN,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;oBAC3D,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;iBAAE,CAAC;YAClF,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,GAAG,EAAE,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;gBACpE,MAAM,EAAE,GAAG,EAAE,EAAE;gBACf,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAAE,CAAC;QACnD,CAAC;QACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,gBAAgB,CAAC;QAC1D,MAAM,KAAK,GAAG,yBAAyB,CAAC,cAAc,CAAC;QACvD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE;YACL,GAAG,KAAK;YACR,EAAE,CAAC,kBAAkB,CAAC;SACvB;KAAE,CAAC;AACR,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB;IAKxC,MAAM,IAAI,GACR,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;QACpB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAClB,CAAC,IAAI,CAAC,OAAO;YACX,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,IAAI,CAAC;oBACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,EAAE;YACN,CAAC,CAAC,EAAE,CAAC,CAAC;IACV,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAC1D,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,MAAM;KAAE,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,IAAgB;IACnC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC/B,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,KAAK,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAA2B,EAC3B,UAAmB;IAEnB,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAC7C,oCAAoC,CACrC,CAAC;QACF,MAAM,CAAC,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,IAAkB,EAClB,KAAa,EACb,MAAwD,EACxD,UAAkB,EAClB,YAAqB;IAErB,MAAM,IAAI,GAAG;QACX,KAAK;QACL,GAAG,CAAC,YAAY;YACd,CAAC,CAAC;gBACE,IAAI;gBACJ,YAAY;gBACZ,IAAI;gBACJ,oBAAoB;gBACpB,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,kCAAkC;aACnC;YACH,CAAC,CAAC,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI;QACJ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACnB,KAAK;QACL,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE;KAClD,CAAC;IACF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;SAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,UAAU,EAAE,EAAE,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAW1C;IACC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE;YACrE,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;SAAE,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,yBAAyB,CAAC;QACrC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI;KAAE,CAAC,CAAC;IACV,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;YACf,IAAI;SAAE,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAgC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACrC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,KAAK,KAAK,CAAC,UAAU,CACrD,CAAC;IAEF,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzE,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC;gBACT,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,GAAG;gBACT,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC;aAAE,CAAC,CAAC;YAC1C,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC;gBACT,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,SAAS;gBACvB,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;aAAE,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,YAAY,CAAC,SAAS,EAAE,GAAG,SAAS,gBAAgB,CAAC,CAAC;gBACtD,YAAY,CAAC,QAAQ,EAAE,GAAG,SAAS,cAAc,CAAC,CAAC;gBACnD,2BAA2B;gBAC3B,SAAS,CAAC,yBAAyB,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC;oBACT,UAAU,EAAE,GAAG;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,YAAY,EAAE,SAAS;oBACvB,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,CAAC,iBAAiB,SAAS,EAAE,CAAC;iBAAE,CAAC,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,uBAAuB,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC;oBACT,UAAU,EAAE,GAAG;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,YAAY,EAAE,QAAQ;oBACtB,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;iBAAE,CAAC,CAAC;gBACzD,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAC9B,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC;gBACT,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;aAAE,CAAC,CAAC;YACrC,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAC5C,KAAK,CAAC,OAAO,EACb,IAAI,CAAC,aAAa,CACnB,CAAC;QACF,eAAe;QACf,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACpC;YACE,KAAK;YACL,GAAG,CAAC,YAAY;gBACd,CAAC,CAAC;oBACE,IAAI;oBACJ,YAAY;oBACZ,IAAI;oBACJ,oBAAoB;oBACpB,IAAI;oBACJ,eAAe;oBACf,IAAI;oBACJ,kCAAkC;iBACnC;gBACH,CAAC,CAAC,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;YAC9D,IAAI;YACJ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACnB,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;YACnC,MAAM;YACN,KAAK;YACL,YAAY,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,yBAAyB,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;SACxI,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QACF,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC;gBACT,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,QAAQ;gBACtB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;aAAE,CAAC,CAAC;YACtF,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,OAAO,CACrB,KAAK,CAAC,IAAI,EACV,SAAS,EACT,MAAM,EACN,GAAG,SAAS,gBAAgB,EAC5B,YAAY,CACb,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,OAAO,CACrB,KAAK,CAAC,IAAI,EACV,QAAQ,EACR,MAAM,EACN,GAAG,SAAS,cAAc,EAC1B,YAAY,CACb,CAAC;QACF,oBAAoB;QACpB,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;YACE,KAAK;YACL,GAAG,CAAC,YAAY;gBACd,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,eAAe,CAAC;gBACzE,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC5B,IAAI;YACJ,kCAAkC;YAClC,IAAI;YACJ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACnB,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;YACnC,MAAM;YACN,KAAK;YACL,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,SAAS,gBAAgB,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,SAAS,cAAc,CAAC,EAAE;SACvH,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;QAEF,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACvC,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;SAAE,CAAC,CAAC;QAC7B,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,kCAAkC;IAClC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE;YACtB,GAAG,IAAI;YACP,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE;gBACH,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;gBACxD,MAAM,EAAE,IAAI,CAAC,MAAM;aAAE;SAAE,CAAC,CAAC;IAC/B,CAAC;IAED,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,sBAAsB,CAAC;QAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ;KAAE,CAAC,CAAC;IACd,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEnC,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC;YAC7B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SAAE,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAClD,kDAAkD;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;YAC9D,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC3C,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;oBAC9B,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;oBAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;qBAAM,IAAI,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;oBACvC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;oBAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC;QACnE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACzE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACvE,IAAI,YAAyB,CAAC;IAC9B,IAAI,EAAW,CAAC;IAChB,IAAI,OAAO,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,YAAY,GAAG,SAAS,CAAC;QACzB,EAAE,GAAG,IAAI,CAAC;IACZ,CAAC;SAAM,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3D,YAAY,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,EAAE,GAAG,OAAO,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,QAAQ,CAAC;QACxB,EAAE,GAAG,KAAK,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,6BAA6B,CAAC,CAClC,CAAC;IAEF,OAAO;QACL,EAAE;QACF,YAAY;QACZ,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,KAAK;QACL,KAAK;QACL,WAAW;QACX,IAAI;KAAE,CAAC;AACX,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAMxC;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;SAAE,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE;YACrE,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;IACvB,CAAC;IACD,SAAS,CAAC,yBAAyB,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,sBAAsB,CAAC;QAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE;YACR,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,yBAAyB,IAAI,CAAC,EAAE,EAAE;SAAE;KAAE,CAAC,CAAC;IACzD,OAAO,aAAa,CAAC;QACnB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;KAAE,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAW7C;IAWC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE;YACrE,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,WAAW,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,eAAe,CAAC;YAC3B,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE;YAC3D,KAAK;YACL,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,QAAQ;SAAE,CAAC,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,KAAK;SAAE,CAAC;IACtB,CAAC;IAED,sBAAsB;IACtB,MAAM,OAAO,GAAG,yBAAyB,IAAI,CAAC,EAAE,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,iCAAiC,OAAO,IAAI,MAAM,YAAY,KAAK,sDAAsD,CAAC;IACtI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEnC,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YAC7C,QAAQ;YACR,QAAQ,EAAE,KAAK;SAAE,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,QAAQ;SAAE,CAAC;IACf,CAAC;IAED,0BAA0B;IAC1B,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC;QACpC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,IAAI,CAAC,EAAE;KAAE,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAExD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE;QACzD,SAAS,EAAE,OAAO;KAAE,CAAC,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CACvE,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,YAAY,EAAE,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK;YACL,QAAQ;YACR,QAAQ;SAAE,CAAC;IACf,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEnC,sBAAsB;IACtB,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE;QACtB,GAAG,IAAI;QACP,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;KAAE,CAAC,CAAC;IAE1D,IAAI,IAAiC,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC/B,IAAI,GAAG,MAAM,oBAAoB,CAAC;YAChC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;SAAE,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,SAAS;QAC7C,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,KAAK;QACL,QAAQ;QACR,QAAQ;QACR,UAAU,EAAE,IAAI;KAAE,CAAC;AACvB,CAAC"}