@cap-kit/tls-fingerprint 8.0.0

package/dist/docs.json

@@ -0,0 +1,386 @@
+{
+  "api": {
+    "name": "TLSFingerprintPlugin",
+    "slug": "tlsfingerprintplugin",
+    "docs": "TLS Fingerprint Capacitor Plugin interface.",
+    "tags": [],
+    "methods": [
+      {
+        "name": "checkCertificate",
+        "signature": "(options: TLSFingerprintOptions) => Promise<TLSFingerprintResult>",
+        "parameters": [
+          {
+            "name": "options",
+            "docs": "",
+            "type": "TLSFingerprintOptions"
+          }
+        ],
+        "returns": "Promise<TLSFingerprintResult>",
+        "tags": [
+          {
+            "name": "throws",
+            "text": "CapacitorException with code `TLSFingerprintErrorCode`"
+          },
+          {
+            "name": "since",
+            "text": "8.0.0"
+          }
+        ],
+        "docs": "Checks the SSL certificate of a server using a single fingerprint.",
+        "complexTypes": [
+          "TLSFingerprintResult",
+          "TLSFingerprintOptions"
+        ],
+        "slug": "checkcertificate"
+      },
+      {
+        "name": "checkCertificates",
+        "signature": "(options: TLSFingerprintMultiOptions) => Promise<TLSFingerprintResult>",
+        "parameters": [
+          {
+            "name": "options",
+            "docs": "",
+            "type": "TLSFingerprintMultiOptions"
+          }
+        ],
+        "returns": "Promise<TLSFingerprintResult>",
+        "tags": [
+          {
+            "name": "throws",
+            "text": "CapacitorException with code `TLSFingerprintErrorCode`"
+          },
+          {
+            "name": "since",
+            "text": "8.0.0"
+          }
+        ],
+        "docs": "Checks the SSL certificate of a server using multiple allowed fingerprints.",
+        "complexTypes": [
+          "TLSFingerprintResult",
+          "TLSFingerprintMultiOptions"
+        ],
+        "slug": "checkcertificates"
+      },
+      {
+        "name": "getPluginVersion",
+        "signature": "() => Promise<PluginVersionResult>",
+        "parameters": [],
+        "returns": "Promise<PluginVersionResult>",
+        "tags": [
+          {
+            "name": "returns",
+            "text": "A promise resolving to the plugin version."
+          },
+          {
+            "name": "example",
+            "text": "```ts\nconst { version } = await TLSFingerprint.getPluginVersion();\n```"
+          },
+          {
+            "name": "since",
+            "text": "8.0.0"
+          }
+        ],
+        "docs": "Returns the native plugin version.\n\nThe returned version corresponds to the native implementation\nbundled with the application.",
+        "complexTypes": [
+          "PluginVersionResult"
+        ],
+        "slug": "getpluginversion"
+      }
+    ],
+    "properties": []
+  },
+  "interfaces": [
+    {
+      "name": "TLSFingerprintResult",
+      "slug": "tlsfingerprintresult",
+      "docs": "Result returned by an TLS fingerprint operation.\n\nThis object is returned for ALL outcomes:\n- Success: `fingerprintMatched: true`\n- Mismatch: `fingerprintMatched: false` with error info (RESOLVED, not rejected)\n\nOnly operation failures (invalid input, config missing, network errors,\ntimeout, internal errors) reject the Promise.",
+      "tags": [],
+      "methods": [],
+      "properties": [
+        {
+          "name": "actualFingerprint",
+          "tags": [],
+          "docs": "The actual SHA-256 fingerprint of the server certificate.\n\nPresent in fingerprint and excluded modes.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
+        {
+          "name": "fingerprintMatched",
+          "tags": [],
+          "docs": "Indicates whether the certificate validation succeeded.\n\n- true  → Pinning passed\n- false → Pinning failed",
+          "complexTypes": [],
+          "type": "boolean"
+        },
+        {
+          "name": "matchedFingerprint",
+          "tags": [],
+          "docs": "The fingerprint that successfully matched, if any.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
+        {
+          "name": "excludedDomain",
+          "tags": [],
+          "docs": "Indicates that TLS fingerprint was skipped because\nthe request host matched an excluded domain.",
+          "complexTypes": [],
+          "type": "boolean | undefined"
+        },
+        {
+          "name": "mode",
+          "tags": [],
+          "docs": "Indicates which pinning mode was used.\n\n- \"fingerprint\"\n- \"excluded\"",
+          "complexTypes": [],
+          "type": "'fingerprint' | 'excluded' | undefined"
+        },
+        {
+          "name": "error",
+          "tags": [],
+          "docs": "Human-readable error message when pinning fails.\nPresent when `fingerprintMatched: false`.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
+        {
+          "name": "errorCode",
+          "tags": [],
+          "docs": "Standardized error code aligned with TLSFingerprintErrorCode.",
+          "complexTypes": [
+            "TLSFingerprintErrorCode"
+          ],
+          "type": "TLSFingerprintErrorCode"
+        }
+      ]
+    },
+    {
+      "name": "TLSFingerprintOptions",
+      "slug": "tlsfingerprintoptions",
+      "docs": "Options for checking a single SSL certificate.",
+      "tags": [],
+      "methods": [],
+      "properties": [
+        {
+          "name": "url",
+          "tags": [
+            {
+              "text": "\"https://example.com\"",
+              "name": "example"
+            }
+          ],
+          "docs": "HTTPS URL of the server whose SSL certificate must be checked.\n\nThis value is REQUIRED and cannot be provided via configuration.",
+          "complexTypes": [],
+          "type": "string"
+        },
+        {
+          "name": "fingerprint",
+          "tags": [],
+          "docs": "Expected SHA-256 fingerprint of the certificate.\n\nResolution order:\n1. `options.fingerprint` (runtime)\n2. `plugins.TLSFingerprint.fingerprint` (config)\n\nIf neither is provided, the Promise is rejected with\n`TLSFingerprintErrorCode.UNAVAILABLE`.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        }
+      ]
+    },
+    {
+      "name": "TLSFingerprintMultiOptions",
+      "slug": "tlsfingerprintmultioptions",
+      "docs": "Options for checking an SSL certificate using multiple allowed fingerprints.",
+      "tags": [],
+      "methods": [],
+      "properties": [
+        {
+          "name": "url",
+          "tags": [
+            {
+              "text": "\"https://example.com\"",
+              "name": "example"
+            }
+          ],
+          "docs": "HTTPS URL of the server whose SSL certificate must be checked.\n\nThis value is REQUIRED and cannot be provided via configuration.",
+          "complexTypes": [],
+          "type": "string"
+        },
+        {
+          "name": "fingerprints",
+          "tags": [],
+          "docs": "Expected SHA-256 fingerprints of the certificate.\n\nResolution order:\n1. `options.fingerprints` (runtime)\n2. `plugins.TLSFingerprint.fingerprints` (config)\n\nIf neither is provided, the Promise is rejected with\n`TLSFingerprintErrorCode.UNAVAILABLE`.",
+          "complexTypes": [],
+          "type": "string[] | undefined"
+        }
+      ]
+    },
+    {
+      "name": "PluginVersionResult",
+      "slug": "pluginversionresult",
+      "docs": "Result returned by the getPluginVersion method.",
+      "tags": [],
+      "methods": [],
+      "properties": [
+        {
+          "name": "version",
+          "tags": [],
+          "docs": "The native version string of the plugin.",
+          "complexTypes": [],
+          "type": "string"
+        }
+      ]
+    }
+  ],
+  "enums": [
+    {
+      "name": "TLSFingerprintErrorCode",
+      "slug": "tlsfingerprinterrorcode",
+      "members": [
+        {
+          "name": "UNAVAILABLE",
+          "value": "'UNAVAILABLE'",
+          "tags": [],
+          "docs": "Required data is missing or the feature is not available."
+        },
+        {
+          "name": "CANCELLED",
+          "value": "'CANCELLED'",
+          "tags": [],
+          "docs": "The user cancelled an interactive flow."
+        },
+        {
+          "name": "PERMISSION_DENIED",
+          "value": "'PERMISSION_DENIED'",
+          "tags": [],
+          "docs": "The user denied a required permission or the feature is disabled."
+        },
+        {
+          "name": "INIT_FAILED",
+          "value": "'INIT_FAILED'",
+          "tags": [],
+          "docs": "The TLS fingerprint operation failed due to a runtime or initialization error."
+        },
+        {
+          "name": "INVALID_INPUT",
+          "value": "'INVALID_INPUT'",
+          "tags": [],
+          "docs": "The input provided to the plugin method is invalid, missing, or malformed."
+        },
+        {
+          "name": "UNKNOWN_TYPE",
+          "value": "'UNKNOWN_TYPE'",
+          "tags": [],
+          "docs": "Invalid or unsupported input was provided."
+        },
+        {
+          "name": "NOT_FOUND",
+          "value": "'NOT_FOUND'",
+          "tags": [],
+          "docs": "The requested resource does not exist."
+        },
+        {
+          "name": "CONFLICT",
+          "value": "'CONFLICT'",
+          "tags": [],
+          "docs": "The operation conflicts with the current state."
+        },
+        {
+          "name": "TIMEOUT",
+          "value": "'TIMEOUT'",
+          "tags": [],
+          "docs": "The operation did not complete within the expected time."
+        },
+        {
+          "name": "PINNING_FAILED",
+          "value": "'PINNING_FAILED'",
+          "tags": [],
+          "docs": "The server certificate fingerprint did not match any expected fingerprint."
+        },
+        {
+          "name": "EXCLUDED_DOMAIN",
+          "value": "'EXCLUDED_DOMAIN'",
+          "tags": [],
+          "docs": "The request host matched an excluded domain."
+        },
+        {
+          "name": "NETWORK_ERROR",
+          "value": "'NETWORK_ERROR'",
+          "tags": [],
+          "docs": "Network connectivity or TLS handshake error."
+        },
+        {
+          "name": "SSL_ERROR",
+          "value": "'SSL_ERROR'",
+          "tags": [],
+          "docs": "SSL/TLS specific error (certificate expired, handshake failure, etc.)."
+        }
+      ]
+    }
+  ],
+  "typeAliases": [],
+  "pluginConfigs": [
+    {
+      "name": "TLSFingerprint",
+      "slug": "tlsfingerprint",
+      "properties": [
+        {
+          "name": "verboseLogging",
+          "tags": [
+            {
+              "text": "false",
+              "name": "default"
+            },
+            {
+              "text": "true",
+              "name": "example"
+            },
+            {
+              "text": "8.0.0",
+              "name": "since"
+            }
+          ],
+          "docs": "Enables verbose native logging.\n\nWhen enabled, additional debug information is printed\nto the native console (Logcat on Android, Xcode on iOS).\n\nThis option affects native logging behavior only and\nhas no impact on the JavaScript API.",
+          "complexTypes": [],
+          "type": "boolean | undefined"
+        },
+        {
+          "name": "fingerprint",
+          "tags": [
+            {
+              "text": "\"50:4B:A1:B5:48:96:71:F3:9F:87:7E:0A:09:FD:3E:1B:C0:4F:AA:9F:FC:83:3E:A9:3A:00:78:88:F8:BA:60:26\"",
+              "name": "example"
+            },
+            {
+              "text": "8.0.0",
+              "name": "since"
+            }
+          ],
+          "docs": "Default fingerprint used by `checkCertificate()` when\n`options.fingerprint` is not provided at runtime.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
+        {
+          "name": "fingerprints",
+          "tags": [
+            {
+              "text": "[\"50:4B:A1:B5:48:96:71:F3:9F:87:7E:0A:09:FD:3E:1B:C0:4F:AA:9F:FC:83:3E:A9:3A:00:78:88:F8:BA:60:26\"]",
+              "name": "example"
+            },
+            {
+              "text": "8.0.0",
+              "name": "since"
+            }
+          ],
+          "docs": "Default fingerprints used by `checkCertificates()` when\n`options.fingerprints` is not provided at runtime.",
+          "complexTypes": [],
+          "type": "string[] | undefined"
+        },
+        {
+          "name": "excludedDomains",
+          "tags": [
+            {
+              "text": "8.0.0",
+              "name": "since"
+            }
+          ],
+          "docs": "Domains to bypass. Matches exact domain or subdomains.\nDo not include schemes or paths.",
+          "complexTypes": [],
+          "type": "string[] | undefined"
+        }
+      ],
+      "docs": "Configuration options for the TLSFingerprint plugin."
+    }
+  ]
+}

package/dist/esm/cli/fingerprint.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/esm/cli/fingerprint.js

@@ -0,0 +1,161 @@
+import crypto from 'crypto';
+import fs from 'fs/promises';
+import https from 'https';
+import { createRequire } from 'module';
+import yargs from 'yargs';
+import { hideBin } from 'yargs/helpers';
+const require = createRequire(import.meta.url);
+const pkg = require('../../package.json');
+async function getCertificate(domain, insecure) {
+    return new Promise((resolve, reject) => {
+        const options = {
+            host: domain,
+            port: 443,
+            method: 'GET',
+            rejectUnauthorized: !insecure,
+        };
+        const req = https.request(options, (res) => {
+            var _a, _b, _c;
+            const socket = res.socket;
+            const cert = (_a = socket === null || socket === void 0 ? void 0 : socket.getPeerCertificate) === null || _a === void 0 ? void 0 : _a.call(socket, true);
+            if (!(cert === null || cert === void 0 ? void 0 : cert.raw)) {
+                reject(new Error('Unable to retrieve peer certificate'));
+                return;
+            }
+            const fingerprint = crypto
+                .createHash('sha256')
+                .update(cert.raw)
+                .digest('hex')
+                .match(/.{2}/g)
+                .join(':')
+                .toUpperCase();
+            resolve({
+                domain,
+                subject: (_b = cert.subject) !== null && _b !== void 0 ? _b : {},
+                issuer: (_c = cert.issuer) !== null && _c !== void 0 ? _c : {},
+                validFrom: cert.valid_from,
+                validTo: cert.valid_to,
+                fingerprint,
+            });
+        });
+        req.on('error', reject);
+        req.end();
+    });
+}
+function formatOutput(results, mode, format) {
+    const fingerprints = results.map((r) => r.fingerprint);
+    switch (format) {
+        case 'fingerprints':
+            return `export const fingerprints = ${JSON.stringify(fingerprints, null, 2)};`;
+        case 'capacitor': {
+            if (mode === 'single') {
+                return `plugins: {
+  TLSFingerprint: {
+    fingerprint: "${fingerprints[0]}"
+  }
+}`;
+            }
+            return `plugins: {
+  TLSFingerprint: {
+    fingerprints: ${JSON.stringify(fingerprints, null, 4)}
+  }
+}`;
+        }
+        case 'capacitor-plugin': {
+            if (mode === 'single') {
+                return `TLSFingerprint: {
+  fingerprint: "${fingerprints[0]}"
+}`;
+            }
+            return `TLSFingerprint: {
+  fingerprints: ${JSON.stringify(fingerprints, null, 4)}
+}`;
+        }
+        case 'capacitor-json': {
+            if (mode === 'single') {
+                return JSON.stringify({
+                    plugins: {
+                        TLSFingerprint: {
+                            fingerprint: fingerprints[0],
+                        },
+                    },
+                }, null, 2);
+            }
+            return JSON.stringify({
+                plugins: {
+                    TLSFingerprint: {
+                        fingerprints,
+                    },
+                },
+            }, null, 2);
+        }
+        case 'json':
+        default:
+            return JSON.stringify(results, null, 2);
+    }
+}
+async function main() {
+    var _a, _b, _c;
+    const argv = await yargs(hideBin(process.argv))
+        .usage('Usage: $0 <domains...> [options]')
+        .version(pkg.version)
+        .option('out', {
+        alias: 'o',
+        type: 'string',
+        description: 'Output file path',
+    })
+        .option('format', {
+        alias: 'f',
+        type: 'string',
+        choices: ['json', 'fingerprints', 'capacitor', 'capacitor-plugin', 'capacitor-json'],
+        default: 'json',
+        description: 'Output format',
+    })
+        .option('mode', {
+        type: 'string',
+        choices: ['single', 'multi'],
+        default: 'single',
+        description: 'Fingerprint mode (single or multi)',
+    })
+        .option('insecure', {
+        type: 'boolean',
+        default: true,
+        description: 'Allow insecure TLS connections (disables certificate validation)',
+    })
+        .demandCommand(1, 'At least one domain is required')
+        .help().argv;
+    const domains = argv._;
+    const results = [];
+    console.log('Fetching certificates...\n');
+    for (const domain of domains) {
+        try {
+            const certInfo = await getCertificate(domain, argv.insecure);
+            results.push(certInfo);
+            console.log(`Domain: ${certInfo.domain}`);
+            console.log(`Subject: ${(_a = certInfo.subject.CN) !== null && _a !== void 0 ? _a : '-'}`);
+            console.log(`Issuer: ${(_b = certInfo.issuer.CN) !== null && _b !== void 0 ? _b : '-'}`);
+            console.log(`Valid From: ${certInfo.validFrom}`);
+            console.log(`Valid To: ${certInfo.validTo}`);
+            console.log(`SHA256 Fingerprint: ${certInfo.fingerprint}`);
+            console.log('-------------------\n');
+        }
+        catch (err) {
+            console.error(`Error fetching cert for ${domain}: ${(_c = err === null || err === void 0 ? void 0 : err.message) !== null && _c !== void 0 ? _c : err}`);
+            console.log('-------------------\n');
+        }
+    }
+    const output = formatOutput(results, argv.mode, argv.format);
+    if (argv.out) {
+        await fs.writeFile(argv.out, output);
+        console.log(`Results written to ${argv.out}`);
+    }
+    else {
+        console.log(output);
+    }
+    process.exit(0);
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=fingerprint.js.map

package/dist/esm/cli/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../src/cli/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAc1C,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,QAAiB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAyB;YACpC,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,KAAK;YACb,kBAAkB,EAAE,CAAC,QAAQ;SAC9B,CAAC;QAEF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;;YACzC,MAAM,MAAM,GAAQ,GAAG,CAAC,MAAM,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,kBAAkB,uDAAG,IAAI,CAAC,CAAC;YAEhD,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAA,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,MAAM;iBACvB,UAAU,CAAC,QAAQ,CAAC;iBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;iBAChB,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,OAAO,CAAE;iBACf,IAAI,CAAC,GAAG,CAAC;iBACT,WAAW,EAAE,CAAC;YAEjB,OAAO,CAAC;gBACN,MAAM;gBACN,OAAO,EAAE,MAAA,IAAI,CAAC,OAAO,mCAAI,EAAE;gBAC3B,MAAM,EAAE,MAAA,IAAI,CAAC,MAAM,mCAAI,EAAE;gBACzB,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,WAAW;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B,EAAE,IAAU,EAAE,MAAc;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAEvD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,cAAc;YACjB,OAAO,+BAA+B,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC;QAEjF,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO;;oBAEK,YAAY,CAAC,CAAC,CAAC;;EAEjC,CAAC;YACG,CAAC;YACD,OAAO;;oBAEO,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;;EAEvD,CAAC;QACC,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO;kBACG,YAAY,CAAC,CAAC,CAAC;EAC/B,CAAC;YACG,CAAC;YACD,OAAO;kBACK,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;EACrD,CAAC;QACC,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC,SAAS,CACnB;oBACE,OAAO,EAAE;wBACP,cAAc,EAAE;4BACd,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;yBAC7B;qBACF;iBACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CACnB;gBACE,OAAO,EAAE;oBACP,cAAc,EAAE;wBACd,YAAY;qBACb;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;;IACjB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAC5C,KAAK,CAAC,kCAAkC,CAAC;SACzC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;SACpB,MAAM,CAAC,KAAK,EAAE;QACb,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,kBAAkB;KAChC,CAAC;SACD,MAAM,CAAC,QAAQ,EAAE;QAChB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;QACpF,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,eAAe;KAC7B,CAAC;SACD,MAAM,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC5B,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,oCAAoC;KAClD,CAAC;SACD,MAAM,CAAC,UAAU,EAAE;QAClB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,kEAAkE;KAChF,CAAC;SACD,aAAa,CAAC,CAAC,EAAE,iCAAiC,CAAC;SACnD,IAAI,EAAE,CAAC,IAAI,CAAC;IAEf,MAAM,OAAO,GAAG,IAAI,CAAC,CAAa,CAAC;IACnC,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEvB,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,MAAA,QAAQ,CAAC,OAAO,CAAC,EAAE,mCAAI,GAAG,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,WAAW,MAAA,QAAQ,CAAC,MAAM,CAAC,EAAE,mCAAI,GAAG,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,uBAAuB,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,KAAK,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,mCAAI,GAAG,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,IAAY,EAAE,IAAI,CAAC,MAAgB,CAAC,CAAC;IAE/E,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}