@agirails/sdk 2.0.0 → 2.0.1-beta

package/dist/utils/security.js

@@ -1,391 +0,0 @@
-"use strict";
-/**
- * Security Utilities for ACTP SDK
- *
- * SECURITY FIXES:
- * - H-7: Constant-time string comparison (timing attack prevention)
- * - H-6: Path traversal prevention
- * - H-2: Input validation and sanitization
- * - C-3: Safe JSON parsing with schema validation
- *
- * @module utils/security
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LRUCache = exports.safeJSONParse = exports.isValidAddress = exports.validateServiceName = exports.validatePath = exports.timingSafeEqual = void 0;
-const crypto = __importStar(require("crypto"));
-const path = __importStar(require("path"));
-/**
- * H-7: Constant-time string comparison to prevent timing attacks
- *
- * Never use === for comparing signatures, hashes, or other security-sensitive strings
- * as it can leak timing information that attackers can exploit.
- *
- * @param a - First string to compare
- * @param b - Second string to compare
- * @returns true if strings are equal, false otherwise
- */
-function timingSafeEqual(a, b) {
-    if (typeof a !== 'string' || typeof b !== 'string') {
-        return false;
-    }
-    // Convert to buffers for crypto.timingSafeEqual
-    const bufA = Buffer.from(a);
-    const bufB = Buffer.from(b);
-    // If lengths differ, still use timingSafeEqual to prevent timing leaks
-    if (bufA.length !== bufB.length) {
-        // Compare against a dummy buffer of the same length to maintain constant time
-        const dummy = Buffer.alloc(bufA.length);
-        crypto.timingSafeEqual(bufA, dummy);
-        return false;
-    }
-    return crypto.timingSafeEqual(bufA, bufB);
-}
-exports.timingSafeEqual = timingSafeEqual;
-/**
- * H-6: Validate and sanitize directory path to prevent path traversal
- *
- * Ensures that the provided path:
- * 1. Does not contain '..' sequences
- * 2. Resolves to a location within the allowed base directory
- * 3. Does not follow symlinks (optional)
- *
- * @param requestedPath - The path to validate
- * @param baseDirectory - The base directory to restrict paths to
- * @returns Sanitized absolute path
- * @throws Error if path is invalid or contains traversal attempts
- */
-function validatePath(requestedPath, baseDirectory) {
-    // Check for null bytes (can be used to bypass security checks)
-    if (requestedPath.includes('\0')) {
-        throw new Error('Invalid path: null byte detected');
-    }
-    // Normalize the path BEFORE checking for '..'
-    // This prevents tricks like '.../...//' or 'foo/../../../etc/passwd'
-    const normalized = path.normalize(requestedPath);
-    // Check for '..' sequences after normalization
-    if (normalized.includes('..')) {
-        throw new Error('Invalid path: path traversal detected (..)');
-    }
-    // Resolve to absolute path
-    const absolute = path.resolve(baseDirectory, normalized);
-    // Ensure the resolved path is still within the base directory
-    // This prevents attacks like:
-    // - Symlink following to escape the directory
-    // - Absolute paths that ignore the base directory
-    const normalizedBase = path.resolve(baseDirectory);
-    if (!absolute.startsWith(normalizedBase + path.sep) && absolute !== normalizedBase) {
-        throw new Error(`Invalid path: resolved path '${absolute}' is outside base directory '${normalizedBase}'`);
-    }
-    return absolute;
-}
-exports.validatePath = validatePath;
-/**
- * H-2: Validate and sanitize service name
- *
- * Ensures service name:
- * 1. Contains only safe characters (alphanumeric, dash, dot, underscore)
- * 2. Does not exceed maximum length
- * 3. Does not contain special characters that could cause injection
- *
- * @param serviceName - The service name to validate
- * @returns Sanitized service name
- * @throws Error if service name is invalid
- */
-function validateServiceName(serviceName) {
-    if (!serviceName || typeof serviceName !== 'string') {
-        throw new Error('Invalid service name: must be a non-empty string');
-    }
-    // Trim whitespace
-    const trimmed = serviceName.trim();
-    // Check length (max 256 chars)
-    if (trimmed.length === 0) {
-        throw new Error('Invalid service name: cannot be empty');
-    }
-    if (trimmed.length > 256) {
-        throw new Error('Invalid service name: exceeds maximum length of 256 characters');
-    }
-    // Validate format: alphanumeric, dash, dot, underscore only
-    // This prevents injection attacks and ensures compatibility across systems
-    const validPattern = /^[a-zA-Z0-9._-]+$/;
-    if (!validPattern.test(trimmed)) {
-        throw new Error('Invalid service name: only alphanumeric characters, dots, dashes, and underscores are allowed');
-    }
-    // Prevent names that could cause issues
-    if (trimmed === '.' || trimmed === '..' || trimmed.startsWith('.')) {
-        throw new Error('Invalid service name: cannot start with a dot');
-    }
-    return trimmed;
-}
-exports.validateServiceName = validateServiceName;
-/**
- * H-5: Validate Ethereum address format
- *
- * Ensures address:
- * 1. Is a valid hex string
- * 2. Has correct length (42 chars including '0x' prefix)
- * 3. Uses valid checksum if provided (EIP-55)
- *
- * @param address - The Ethereum address to validate
- * @returns true if address is valid, false otherwise
- */
-function isValidAddress(address) {
-    if (!address || typeof address !== 'string') {
-        return false;
-    }
-    // Must start with 0x
-    if (!address.startsWith('0x')) {
-        return false;
-    }
-    // Must be exactly 42 characters (0x + 40 hex chars)
-    if (address.length !== 42) {
-        return false;
-    }
-    // Must contain only valid hex characters
-    const hexPattern = /^0x[a-fA-F0-9]{40}$/;
-    if (!hexPattern.test(address)) {
-        return false;
-    }
-    // Note: Full EIP-55 checksum validation would be more complex
-    // For now, we just validate format. In production, consider using ethers.utils.getAddress()
-    return true;
-}
-exports.isValidAddress = isValidAddress;
-/**
- * C-3: Safe JSON parsing with schema validation
- *
- * Prevents code injection and prototype pollution attacks by:
- * 1. Safely parsing JSON with error handling
- * 2. Validating the parsed object against an expected schema
- * 3. Removing __proto__, constructor, and prototype properties
- * 4. Returning only whitelisted fields
- *
- * @param jsonString - The JSON string to parse
- * @param schema - Expected schema (object with field names and types)
- * @returns Parsed and validated object, or null if invalid
- */
-function safeJSONParse(jsonString, schema) {
-    if (!jsonString || typeof jsonString !== 'string') {
-        return null;
-    }
-    // SECURITY FIX (C-3): Check JSON size to prevent DoS attacks
-    const MAX_JSON_SIZE = 1000000; // 1MB
-    if (jsonString.length > MAX_JSON_SIZE) {
-        return null;
-    }
-    let parsed;
-    try {
-        // Basic JSON parsing
-        parsed = JSON.parse(jsonString);
-    }
-    catch (error) {
-        // Invalid JSON
-        return null;
-    }
-    // Ensure we got an object (not a primitive or array at the top level)
-    if (typeof parsed !== 'object' || parsed === null) {
-        return null;
-    }
-    // Remove dangerous properties that could be used for prototype pollution
-    const dangerous = ['__proto__', 'constructor', 'prototype'];
-    for (const key of dangerous) {
-        delete parsed[key];
-    }
-    // If schema is provided, validate and whitelist
-    if (schema) {
-        const validated = {};
-        for (const [field, expectedType] of Object.entries(schema)) {
-            const value = parsed[field];
-            // Skip if field doesn't exist
-            if (value === undefined) {
-                continue;
-            }
-            // Type check
-            const actualType = Array.isArray(value) ? 'array' : typeof value;
-            if (actualType !== expectedType && expectedType !== 'any') {
-                // Type mismatch - skip this field
-                continue;
-            }
-            // Recursively sanitize nested objects
-            if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
-                validated[field] = sanitizeObject(value);
-            }
-            else if (Array.isArray(value)) {
-                validated[field] = value.map((item) => typeof item === 'object' && item !== null ? sanitizeObject(item) : item);
-            }
-            else {
-                validated[field] = value;
-            }
-        }
-        return validated;
-    }
-    // No schema - return sanitized object
-    return sanitizeObject(parsed);
-}
-exports.safeJSONParse = safeJSONParse;
-/**
- * Recursively sanitize an object by removing dangerous properties
- *
- * @param obj - Object to sanitize
- * @returns Sanitized object
- */
-function sanitizeObject(obj) {
-    if (typeof obj !== 'object' || obj === null) {
-        return obj;
-    }
-    const sanitized = {};
-    const dangerous = ['__proto__', 'constructor', 'prototype'];
-    for (const [key, value] of Object.entries(obj)) {
-        // Skip dangerous keys
-        if (dangerous.includes(key)) {
-            continue;
-        }
-        // Recursively sanitize nested objects
-        if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
-            sanitized[key] = sanitizeObject(value);
-        }
-        else if (Array.isArray(value)) {
-            sanitized[key] = value.map((item) => typeof item === 'object' && item !== null ? sanitizeObject(item) : item);
-        }
-        else {
-            sanitized[key] = value;
-        }
-    }
-    return sanitized;
-}
-/**
- * LRU (Least Recently Used) cache with maximum size
- * Used for preventing unbounded memory growth
- *
- * @template K - Key type
- * @template V - Value type
- */
-class LRUCache {
-    constructor(maxSize = 1000) {
-        this.cache = new Map();
-        if (maxSize <= 0) {
-            throw new Error('LRU cache maxSize must be positive');
-        }
-        this.maxSize = maxSize;
-    }
-    /**
-     * Get value from cache
-     *
-     * @param key - Cache key
-     * @returns Cached value or undefined
-     */
-    get(key) {
-        const value = this.cache.get(key);
-        if (value !== undefined) {
-            // Move to end (most recently used)
-            this.cache.delete(key);
-            this.cache.set(key, value);
-        }
-        return value;
-    }
-    /**
-     * Set value in cache
-     *
-     * @param key - Cache key
-     * @param value - Value to cache
-     */
-    set(key, value) {
-        // Delete if already exists (to update position)
-        if (this.cache.has(key)) {
-            this.cache.delete(key);
-        }
-        // Evict oldest if at capacity
-        if (this.cache.size >= this.maxSize) {
-            const firstKey = this.cache.keys().next().value;
-            // TypeScript doesn't know that Map iterator always returns defined values when size > 0
-            // But we check size >= maxSize above, so this is safe
-            if (firstKey !== undefined) {
-                this.cache.delete(firstKey);
-            }
-        }
-        this.cache.set(key, value);
-    }
-    /**
-     * Check if key exists in cache
-     *
-     * SECURITY FIX (N-1): Use Map's native has() instead of get()
-     * to avoid modifying LRU order on read-only operations.
-     *
-     * @param key - Cache key
-     * @returns true if key exists
-     */
-    has(key) {
-        return this.cache.has(key);
-    }
-    /**
-     * Delete key from cache
-     *
-     * @param key - Cache key
-     */
-    delete(key) {
-        this.cache.delete(key);
-    }
-    /**
-     * Clear all entries
-     */
-    clear() {
-        this.cache.clear();
-    }
-    /**
-     * Get current cache size
-     */
-    get size() {
-        return this.cache.size;
-    }
-    /**
-     * Get all values from cache
-     *
-     * SECURITY FIX (N-2): Add iterator support for LRUCache.
-     * Returns values in LRU order (oldest to newest).
-     *
-     * @returns Array of all cached values
-     */
-    values() {
-        return Array.from(this.cache.values());
-    }
-    /**
-     * Get all keys from cache
-     *
-     * @returns Array of all cached keys
-     */
-    keys() {
-        return Array.from(this.cache.keys());
-    }
-    /**
-     * Get all entries from cache
-     *
-     * @returns Array of all cached [key, value] pairs
-     */
-    entries() {
-        return Array.from(this.cache.entries());
-    }
-}
-exports.LRUCache = LRUCache;
-//# sourceMappingURL=security.js.map

package/dist/utils/security.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/utils/security.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AACjC,2CAA6B;AAE7B;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gDAAgD;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5B,uEAAuE;IACvE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,8EAA8E;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAlBD,0CAkBC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,YAAY,CAAC,aAAqB,EAAE,aAAqB;IACvE,+DAA+D;IAC/D,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,8CAA8C;IAC9C,qEAAqE;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAEjD,+CAA+C;IAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAEzD,8DAA8D;IAC9D,8BAA8B;IAC9B,8CAA8C;IAC9C,kDAAkD;IAClD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,gCAAgC,cAAc,GAAG,CAAC,CAAC;IAC7G,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AA5BD,oCA4BC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnC,+BAA+B;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,4DAA4D;IAC5D,2EAA2E;IAC3E,MAAM,YAAY,GAAG,mBAAmB,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAhCD,kDAgCC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8DAA8D;IAC9D,4FAA4F;IAE5F,OAAO,IAAI,CAAC;AACd,CAAC;AAzBD,wCAyBC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,aAAa,CAC3B,UAAkB,EAClB,MAA+B;IAE/B,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,MAAM,aAAa,GAAG,OAAS,CAAC,CAAC,MAAM;IACvC,IAAI,UAAU,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAW,CAAC;IAEhB,IAAI,CAAC;QACH,qBAAqB;QACrB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sEAAsE;IACtE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAE5B,8BAA8B;YAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,aAAa;YACb,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;YACjE,IAAI,UAAU,KAAK,YAAY,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;gBAC1D,kCAAkC;gBAClC,SAAS;YACX,CAAC;YAED,sCAAsC;YACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzE,SAAS,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACpC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACxE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,SAAc,CAAC;IACxB,CAAC;IAED,sCAAsC;IACtC,OAAO,cAAc,CAAC,MAAM,CAAM,CAAC;AACrC,CAAC;AAvED,sCAuEC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,GAAQ;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAE5D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,sBAAsB;QACtB,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACxE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAa,QAAQ;IAInB,YAAY,UAAkB,IAAI;QAH1B,UAAK,GAAG,IAAI,GAAG,EAAQ,CAAC;QAI9B,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,GAAM;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,mCAAmC;YACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,GAAG,CAAC,GAAM,EAAE,KAAQ;QAClB,gDAAgD;QAChD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,wFAAwF;YACxF,sDAAsD;YACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;;OAQG;IACH,GAAG,CAAC,GAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,GAAM;QACX,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AArHD,4BAqHC"}