@creeperhost/modlens-mcp 1.6.0

package/dist/security.js

@@ -0,0 +1,446 @@
+import { resolve, sep, isAbsolute } from "path";
+import { createHash } from "crypto";
+import { readFile } from "fs/promises";
+import { platform } from "os";
+// ── WSL path normalization ────────────────────────────────────────────────────
+/**
+ * Normalizes a path that may have been typed from a WSL shell or a Windows
+ * shell so both work transparently.
+ *
+ * On Windows:
+ *   /mnt/c/foo/bar.jar  →  C:/foo/bar.jar
+ *   /mnt/wsl/foo.jar    →  left as-is (no drive letter, unlikely to be valid Win path)
+ *   C:\foo\bar.jar      →  left as-is (already Windows)
+ *
+ * On Linux/macOS: returned unchanged (WSL paths are native there).
+ */
+export function normalizeJarPath(p) {
+    if (platform() !== "win32")
+        return p;
+    const m = p.match(/^\/mnt\/([a-zA-Z])(\/.*)?$/);
+    if (m) {
+        const drive = m[1].toUpperCase();
+        const rest = (m[2] ?? "").replace(/\//g, "\\");
+        return `${drive}:${rest || "\\"}`;
+    }
+    return p;
+}
+// ── Path traversal guard ──────────────────────────────────────────────────────
+/**
+ * Validate that `untrusted` resolves to a path inside `base`.
+ * Throws if it would escape (path traversal attempt).
+ * Returns the resolved absolute path on success.
+ */
+export function validatePath(untrusted, base) {
+    const resolvedBase = resolve(base);
+    const resolvedTarget = resolve(base, untrusted);
+    // Allow empty / "." — both resolve to base itself
+    if (resolvedTarget === resolvedBase)
+        return resolvedTarget;
+    const baseWithSep = resolvedBase.endsWith(sep) ? resolvedBase : resolvedBase + sep;
+    if (!resolvedTarget.startsWith(baseWithSep)) {
+        throw new Error(`Path traversal attempt rejected: '${untrusted}'`);
+    }
+    return resolvedTarget;
+}
+// ── JAR path guard ────────────────────────────────────────────────────────────
+/**
+ * Assert that `p` is an absolute path ending in `.jar`.
+ * Use on paths sourced from the DB or other semi-trusted boundaries
+ * to prevent filesystem access to arbitrary files.
+ */
+export function assertJarPath(p) {
+    if (!isAbsolute(p) || !p.toLowerCase().endsWith(".jar")) {
+        throw new Error(`Invalid JAR path rejected: '${p}'`);
+    }
+}
+// ── ReDoS guard ───────────────────────────────────────────────────────────────
+const MAX_REGEX_LENGTH = 500;
+/**
+ * Compile a user-supplied regex string safely.
+ * Throws if the pattern is too long or fails to compile.
+ */
+export function safeRegex(pattern, flags = "i") {
+    if (pattern.length > MAX_REGEX_LENGTH) {
+        throw new Error(`Regex pattern too long (max ${MAX_REGEX_LENGTH} characters)`);
+    }
+    try {
+        return new RegExp(pattern, flags);
+    }
+    catch (e) {
+        throw new Error(`Invalid regex pattern: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
+// ── SHA-512 integrity helpers ─────────────────────────────────────────────────
+/**
+ * Compute the SHA-512 hex digest of a file on disk.
+ */
+export async function fileSha512(filePath) {
+    const buf = await readFile(filePath);
+    return createHash("sha512").update(buf).digest("hex");
+}
+/**
+ * Verify a file's SHA-512 against an expected value.
+ * Throws `HashMismatchError` if they differ.
+ */
+export class HashMismatchError extends Error {
+    constructor(filePath, expected, actual) {
+        super(`SHA-512 mismatch for ${filePath}:\n  expected: ${expected}\n  actual:   ${actual}`);
+        this.name = "HashMismatchError";
+    }
+}
+export async function verifyFileHash(filePath, expectedSha512) {
+    const actual = await fileSha512(filePath);
+    if (actual !== expectedSha512.toLowerCase()) {
+        throw new HashMismatchError(filePath, expectedSha512.toLowerCase(), actual);
+    }
+}
+// ── Invisible Unicode detection ───────────────────────────────────────────────
+/**
+ * Decode Unicode Tag characters (U+E0000-E007F) back to their ASCII equivalents.
+ * This is the technique used by tools like HideTextTool to embed invisible text
+ * within visible strings.  Returns the hidden ASCII payload (empty if none).
+ */
+export function decodeTagChars(text) {
+    let decoded = "";
+    for (let i = 0; i < text.length; i++) {
+        const ch = text.charCodeAt(i);
+        // Tag chars are in the supplementary plane — encoded as surrogate pairs
+        if (ch >= 0xD800 && ch <= 0xDBFF && i + 1 < text.length) {
+            const lo = text.charCodeAt(i + 1);
+            if (lo >= 0xDC00 && lo <= 0xDFFF) {
+                const cp = (ch - 0xD800) * 0x400 + (lo - 0xDC00) + 0x10000;
+                if (cp >= 0xE0000 && cp <= 0xE007F) {
+                    decoded += String.fromCharCode(cp - 0xE0000);
+                }
+                i++; // skip low surrogate
+            }
+        }
+    }
+    return decoded;
+}
+/**
+ * Strip all invisible / zero-width Unicode characters from a string.
+ * Covers: Unicode Tag block (U+E0000-E007F), zero-width chars (U+200B-200D,
+ * U+FEFF, U+2060), bidi overrides (U+200E-200F, U+202A-202E, U+2066-2069),
+ * interlinear annotations (U+FFF9-FFFB), and variation selectors (U+FE00-FE0F).
+ */
+export function stripInvisibleUnicode(text) {
+    let out = "";
+    for (let i = 0; i < text.length; i++) {
+        const ch = text.charCodeAt(i);
+        // Supplementary plane — check surrogate pairs
+        if (ch >= 0xD800 && ch <= 0xDBFF && i + 1 < text.length) {
+            const lo = text.charCodeAt(i + 1);
+            if (lo >= 0xDC00 && lo <= 0xDFFF) {
+                const cp = (ch - 0xD800) * 0x400 + (lo - 0xDC00) + 0x10000;
+                // Skip Tag block (U+E0000-E007F)
+                if (cp >= 0xE0000 && cp <= 0xE007F) {
+                    i++;
+                    continue;
+                }
+                out += text[i] + text[i + 1];
+                i++;
+                continue;
+            }
+        }
+        // BMP invisible characters
+        if ((ch >= 0x200B && ch <= 0x200D) || // ZWSP, ZWNJ, ZWJ
+            ch === 0xFEFF || // BOM / ZWNBSP
+            ch === 0x2060 || // Word Joiner
+            (ch >= 0x200E && ch <= 0x200F) || // LRM, RLM
+            (ch >= 0x202A && ch <= 0x202E) || // bidi embedding/override
+            (ch >= 0x2066 && ch <= 0x2069) || // bidi isolate
+            (ch >= 0xFFF9 && ch <= 0xFFFB) || // interlinear annotation
+            (ch >= 0xFE00 && ch <= 0xFE0F) // variation selectors
+        ) {
+            continue;
+        }
+        out += text[i];
+    }
+    return out;
+}
+/**
+ * Check whether a string contains any invisible Unicode characters
+ * (Tag block, zero-width, bidi overrides, etc.).
+ */
+export function containsInvisibleUnicode(text) {
+    return text !== stripInvisibleUnicode(text);
+}
+// ── Graph bundle validation ───────────────────────────────────────────────────
+const PROMPT_INJECTION_PATTERNS = [
+    /(ignore|disregard|forget)\s+(all|previous|prior|above|system)/i,
+    /(system\s*prompt|you\s*are\s*now|admin\s*mode|execute|run\s*command|eval\()/i,
+    /(curl|wget|bash|powershell|rm\s+-rf|del\s+\/)/i,
+];
+const CONTROL_CHAR_REGEX = /[\x00-\x08\x0b\x0c\x0e-\x1f]/;
+function checkStringField(value, maxLen, fieldName) {
+    if (value === undefined || value === null)
+        return null;
+    if (typeof value !== "string")
+        return `${fieldName} must be a string`;
+    if (value.length > maxLen)
+        return `${fieldName} exceeds max length (${maxLen})`;
+    if (CONTROL_CHAR_REGEX.test(value))
+        return `${fieldName} contains control characters`;
+    if (containsInvisibleUnicode(value))
+        return `${fieldName} contains hidden unicode`;
+    return null;
+}
+function scanForPromptInjection(text) {
+    // Check visible text
+    if (PROMPT_INJECTION_PATTERNS.some(p => p.test(text)))
+        return true;
+    // Decode hidden Tag-character payload and check that too
+    const hidden = decodeTagChars(text);
+    if (hidden && PROMPT_INJECTION_PATTERNS.some(p => p.test(hidden)))
+        return true;
+    return false;
+}
+/**
+ * Validate a graph.json bundle for security issues.
+ * Checks schema, string lengths, prompt injection, and size limits.
+ */
+export function validateGraphBundle(graph) {
+    if (!graph || typeof graph !== "object") {
+        return { valid: false, reason: "graph must be an object" };
+    }
+    const g = graph;
+    // Reject __proto__ pollution
+    if (Object.prototype.hasOwnProperty.call(g, "__proto__") ||
+        Object.prototype.hasOwnProperty.call(g, "constructor") ||
+        Object.prototype.hasOwnProperty.call(g, "prototype")) {
+        return { valid: false, reason: "proto_pollution" };
+    }
+    const nodes = g.nodes;
+    const edges = g.edges;
+    if (!Array.isArray(nodes))
+        return { valid: false, reason: "nodes must be an array" };
+    if (!Array.isArray(edges))
+        return { valid: false, reason: "edges must be an array" };
+    // Size limits
+    if (nodes.length > 500_000)
+        return { valid: false, reason: "too many nodes (>500k)" };
+    if (edges.length > 2_000_000)
+        return { valid: false, reason: "too many edges (>2M)" };
+    const flagged = [];
+    // Validate nodes
+    for (const node of nodes) {
+        if (!node || typeof node !== "object")
+            return { valid: false, reason: "node must be an object" };
+        const n = node;
+        if (Object.prototype.hasOwnProperty.call(n, "__proto__"))
+            return { valid: false, reason: "proto_pollution in node" };
+        const idErr = checkStringField(n.id, 500, "node.id");
+        if (idErr)
+            return { valid: false, reason: idErr };
+        if (!n.id)
+            return { valid: false, reason: "node missing id" };
+        const typeErr = checkStringField(n.type, 100, "node.type");
+        if (typeErr)
+            return { valid: false, reason: typeErr };
+        const srcErr = checkStringField(n.src, 300, "node.src");
+        if (srcErr)
+            return { valid: false, reason: srcErr };
+        const communityErr = checkStringField(n.community, 1000, "node.community");
+        if (communityErr)
+            return { valid: false, reason: communityErr };
+        // Scan text fields for prompt injection
+        const textFields = [n.id, n.community].filter(Boolean).map(String);
+        for (const text of textFields) {
+            if (scanForPromptInjection(text)) {
+                flagged.push(`node:${n.id}`);
+            }
+        }
+    }
+    // Validate edges
+    for (const edge of edges) {
+        if (!edge || typeof edge !== "object")
+            return { valid: false, reason: "edge must be an object" };
+        const e = edge;
+        if (Object.prototype.hasOwnProperty.call(e, "__proto__"))
+            return { valid: false, reason: "proto_pollution in edge" };
+        const srcErr = checkStringField(e.source, 500, "edge.source");
+        if (srcErr)
+            return { valid: false, reason: srcErr };
+        if (!e.source)
+            return { valid: false, reason: "edge missing source" };
+        const tgtErr = checkStringField(e.target, 500, "edge.target");
+        if (tgtErr)
+            return { valid: false, reason: tgtErr };
+        if (!e.target)
+            return { valid: false, reason: "edge missing target" };
+        const relErr = checkStringField(e.relation, 1000, "edge.relation");
+        if (relErr)
+            return { valid: false, reason: relErr };
+        const ctxErr = checkStringField(e.context, 1000, "edge.context");
+        if (ctxErr)
+            return { valid: false, reason: ctxErr };
+        // Scan text fields for prompt injection
+        const textFields = [e.relation, e.context].filter(Boolean).map(String);
+        for (const text of textFields) {
+            if (scanForPromptInjection(text)) {
+                flagged.push(`edge:${e.source}->${e.target}`);
+            }
+        }
+    }
+    if (flagged.length > 0) {
+        return { valid: false, reason: "prompt_injection_suspect", flaggedEntries: flagged };
+    }
+    return { valid: true };
+}
+/**
+ * Validate nodes/edges submitted by the chat agent during enrichment.
+ * Same checks as validateGraphBundle but on individual arrays.
+ */
+export function validateGraphEntries(nodes, edges) {
+    return validateGraphBundle({ nodes, edges });
+}
+// ── Embedding bundle validation ───────────────────────────────────────────────
+const JAVA_CLASS_PATTERN = /^[a-zA-Z_$][a-zA-Z0-9_$]*(\.[a-zA-Z_$][a-zA-Z0-9_$]*)*$/;
+/**
+ * Validate an embedding bundle for security issues.
+ */
+export function validateEmbeddingBundle(bundle) {
+    if (!bundle || typeof bundle !== "object") {
+        return { valid: false, reason: "bundle must be an object" };
+    }
+    const b = bundle;
+    // Reject proto pollution
+    if (Object.prototype.hasOwnProperty.call(b, "__proto__") ||
+        Object.prototype.hasOwnProperty.call(b, "constructor") ||
+        Object.prototype.hasOwnProperty.call(b, "prototype")) {
+        return { valid: false, reason: "proto_pollution" };
+    }
+    if (b.version !== 1)
+        return { valid: false, reason: "unsupported bundle version" };
+    if (typeof b.model !== "string" || b.model.length > 200)
+        return { valid: false, reason: "invalid model field" };
+    if (typeof b.dimensions !== "number" || b.dimensions < 1 || b.dimensions > 4096) {
+        return { valid: false, reason: "dimensions out of range (1-4096)" };
+    }
+    const targetType = typeof b.targetType === "string" ? b.targetType : "mod";
+    if (!["mod", "vanilla", "modloader"].includes(targetType)) {
+        return { valid: false, reason: "invalid targetType" };
+    }
+    const targetId = typeof b.targetId === "string"
+        ? b.targetId
+        : typeof b.modId === "string"
+            ? b.modId
+            : null;
+    const targetVersion = typeof b.targetVersion === "string"
+        ? b.targetVersion
+        : typeof b.modVersion === "string"
+            ? b.modVersion
+            : null;
+    if (!targetId || targetId.length > 200)
+        return { valid: false, reason: "invalid targetId" };
+    if (!targetVersion || targetVersion.length > 200)
+        return { valid: false, reason: "invalid targetVersion" };
+    const entries = b.entries;
+    if (!Array.isArray(entries))
+        return { valid: false, reason: "entries must be an array" };
+    if (entries.length > 100_000)
+        return { valid: false, reason: "too many entries (>100k)" };
+    const dims = b.dimensions;
+    for (const entry of entries) {
+        if (!entry || typeof entry !== "object")
+            return { valid: false, reason: "entry must be an object" };
+        const e = entry;
+        if (Object.prototype.hasOwnProperty.call(e, "__proto__"))
+            return { valid: false, reason: "proto_pollution in entry" };
+        // className validation
+        if (typeof e.className !== "string")
+            return { valid: false, reason: "entry missing className" };
+        if (e.className.length > 500)
+            return { valid: false, reason: "className too long" };
+        if (!JAVA_CLASS_PATTERN.test(e.className)) {
+            return { valid: false, reason: `invalid className format: ${e.className.slice(0, 50)}` };
+        }
+        // Embedding validation
+        if (!Array.isArray(e.embedding))
+            return { valid: false, reason: "entry missing embedding array" };
+        if (e.embedding.length !== dims) {
+            return { valid: false, reason: `embedding dimension mismatch: expected ${dims}, got ${e.embedding.length}` };
+        }
+        for (const val of e.embedding) {
+            if (typeof val !== "number" || !Number.isFinite(val)) {
+                return { valid: false, reason: "embedding contains non-finite value" };
+            }
+            if (Math.abs(val) > 100) {
+                return { valid: false, reason: "embedding value out of range (|x| > 100)" };
+            }
+        }
+    }
+    return { valid: true };
+}
+// ── Registry index validation ─────────────────────────────────────────────────
+/**
+ * Validate an embedding registry index (index.json) returned from a remote server.
+ * Ensures each bundle entry has the expected field types to prevent TypeErrors
+ * from malformed/malicious registry responses.
+ */
+export function validateEmbedRegistryIndex(data) {
+    if (!data || typeof data !== "object")
+        return { valid: false, reason: "registry must be an object" };
+    const d = data;
+    if (typeof d.version !== "number")
+        return { valid: false, reason: "missing or invalid version" };
+    if (!Array.isArray(d.bundles))
+        return { valid: false, reason: "bundles must be an array" };
+    if (d.bundles.length > 50_000)
+        return { valid: false, reason: "too many bundles (>50k)" };
+    for (let i = 0; i < d.bundles.length; i++) {
+        const entry = d.bundles[i];
+        if (!entry || typeof entry !== "object")
+            return { valid: false, reason: `bundle[${i}] must be an object` };
+        const e = entry;
+        if (typeof e.url !== "string" || e.url.length > 2000)
+            return { valid: false, reason: `bundle[${i}].url invalid` };
+        if (typeof e.sha256 !== "string" || !/^[a-f0-9]{64}$/i.test(e.sha256))
+            return { valid: false, reason: `bundle[${i}].sha256 invalid` };
+        if (typeof e.model !== "string" || e.model.length > 200)
+            return { valid: false, reason: `bundle[${i}].model invalid` };
+        if (typeof e.targetId !== "string" || e.targetId.length > 200)
+            return { valid: false, reason: `bundle[${i}].targetId invalid` };
+        if (typeof e.targetVersion !== "string" || e.targetVersion.length > 200)
+            return { valid: false, reason: `bundle[${i}].targetVersion invalid` };
+        if (e.targetType != null && !["mod", "vanilla", "modloader"].includes(e.targetType)) {
+            return { valid: false, reason: `bundle[${i}].targetType invalid` };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Validate a graph registry index (index.json) returned from a remote server.
+ */
+export function validateGraphRegistryIndex(data) {
+    if (!data || typeof data !== "object")
+        return { valid: false, reason: "registry must be an object" };
+    const d = data;
+    if (typeof d.version !== "number")
+        return { valid: false, reason: "missing or invalid version" };
+    if (!Array.isArray(d.graphs))
+        return { valid: false, reason: "graphs must be an array" };
+    if (d.graphs.length > 50_000)
+        return { valid: false, reason: "too many graphs (>50k)" };
+    for (let i = 0; i < d.graphs.length; i++) {
+        const entry = d.graphs[i];
+        if (!entry || typeof entry !== "object")
+            return { valid: false, reason: `graph[${i}] must be an object` };
+        const e = entry;
+        if (typeof e.graphUrl !== "string" || e.graphUrl.length > 2000)
+            return { valid: false, reason: `graph[${i}].graphUrl invalid` };
+        if (typeof e.sha256 !== "string" || !/^[a-f0-9]{64}$/i.test(e.sha256))
+            return { valid: false, reason: `graph[${i}].sha256 invalid` };
+        if (typeof e.modId !== "string" || e.modId.length > 200)
+            return { valid: false, reason: `graph[${i}].modId invalid` };
+        if (typeof e.version !== "string" || e.version.length > 200)
+            return { valid: false, reason: `graph[${i}].version invalid` };
+        if (e.targetType != null && !["mod", "vanilla", "modloader"].includes(e.targetType)) {
+            return { valid: false, reason: `graph[${i}].targetType invalid` };
+        }
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAE9B,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACtC,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC;QACJ,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,OAAO,GAAG,KAAK,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,IAAY;IACxD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEhD,kDAAkD;IAClD,IAAI,cAAc,KAAK,YAAY;QAAE,OAAO,cAAc,CAAC;IAE3D,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC;IACnF,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACnC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAK,GAAG,GAAG;IAClD,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,+BAA+B,gBAAgB,cAAc,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC;QACD,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxC,YAAY,QAAgB,EAAE,QAAgB,EAAE,MAAc;QAC1D,KAAK,CAAC,wBAAwB,QAAQ,kBAAkB,QAAQ,iBAAiB,MAAM,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IACpC,CAAC;CACJ;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,cAAsB;IACzE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,cAAc,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACvC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,wEAAwE;QACxE,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;gBAC/B,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC;gBAC3D,IAAI,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;oBACjC,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC;gBACjD,CAAC;gBACD,CAAC,EAAE,CAAC,CAAC,qBAAqB;YAC9B,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAE9B,8CAA8C;QAC9C,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;gBAC/B,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC;gBAC3D,iCAAiC;gBACjC,IAAI,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACtD,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7B,CAAC,EAAE,CAAC;gBACJ,SAAS;YACb,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IACI,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,kBAAkB;YACpD,EAAE,KAAK,MAAM,IAAqB,eAAe;YACjD,EAAE,KAAK,MAAM,IAAqB,cAAc;YAChD,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,WAAW;YAC7C,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,0BAA0B;YAC5D,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,eAAe;YACjD,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,yBAAyB;YAC3D,CAAC,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,CAAI,sBAAsB;UAC1D,CAAC;YACC,SAAS;QACb,CAAC;QAED,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACjD,OAAO,IAAI,KAAK,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,iFAAiF;AAEjF,MAAM,yBAAyB,GAAG;IAC9B,gEAAgE;IAChE,8EAA8E;IAC9E,gDAAgD;CACnD,CAAC;AAEF,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAQ1D,SAAS,gBAAgB,CAAC,KAAc,EAAE,MAAc,EAAE,SAAiB;IACvE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,SAAS,mBAAmB,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,GAAG,SAAS,wBAAwB,MAAM,GAAG,CAAC;IAChF,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,SAAS,8BAA8B,CAAC;IACtF,IAAI,wBAAwB,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,SAAS,0BAA0B,CAAC;IACnF,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IACxC,qBAAqB;IACrB,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,yDAAyD;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,6BAA6B;IAC7B,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAEtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAErF,cAAc;IACd,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAEtF,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,iBAAiB;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACjG,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAErH,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAClD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAE9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAEtD,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEpD,MAAM,YAAY,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC3E,IAAI,YAAY;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAEhE,wCAAwC;QACxC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,CAAC;QACL,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACjG,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAErH,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAEtE,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAEtE,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QACnE,IAAI,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACjE,IAAI,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEpD,wCAAwC;QACxC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IACzF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAChC,KAAkD,EAClD,KAAwF;IAExF,OAAO,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,iFAAiF;AAEjF,MAAM,kBAAkB,GAAG,yDAAyD,CAAC;AAcrF;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAe;IACnD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,yBAAyB;IACzB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACnF,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAChH,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3E,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC3C,CAAC,CAAC,CAAC,CAAC,QAAQ;QACZ,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,IAAI,CAAC;IACf,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QACrD,CAAC,CAAC,CAAC,CAAC,aAAa;QACjB,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;YAC9B,CAAC,CAAC,CAAC,CAAC,UAAU;YACd,CAAC,CAAC,IAAI,CAAC;IACf,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC5F,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAE3G,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACzF,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAE1F,MAAM,IAAI,GAAG,CAAC,CAAC,UAAoB,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QACpG,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAEtH,uBAAuB;QACvB,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAChG,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACpF,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7F,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QAClG,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,IAAI,SAAS,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACjH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,SAAsB,EAAE,CAAC;YACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;YAC3E,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;gBACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;YAChF,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACpD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACrG,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACjG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC3F,IAAK,CAAC,CAAC,OAAqB,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAEzG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAI,CAAC,CAAC,OAAqB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,GAAI,CAAC,CAAC,OAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,qBAAqB,EAAE,CAAC;QAC3G,MAAM,CAAC,GAAG,KAAgC,CAAC;QAE3C,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC;QAClH,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACtI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACvH,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,oBAAoB,EAAE,CAAC;QAChI,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,yBAAyB,EAAE,CAAC;QAC/I,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAoB,CAAC,EAAE,CAAC;YAC5F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,sBAAsB,EAAE,CAAC;QACvE,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACpD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACrG,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACjG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACzF,IAAK,CAAC,CAAC,MAAoB,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAEvG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAI,CAAC,CAAC,MAAoB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,KAAK,GAAI,CAAC,CAAC,MAAoB,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,qBAAqB,EAAE,CAAC;QAC1G,MAAM,CAAC,GAAG,KAAgC,CAAC;QAE3C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC;QAChI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACrI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,iBAAiB,EAAE,CAAC;QACtH,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,mBAAmB,EAAE,CAAC;QAC5H,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAoB,CAAC,EAAE,CAAC;YAC5F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACtE,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/security.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security.test.d.ts.map

package/dist/security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.d.ts","sourceRoot":"","sources":["../src/security.test.ts"],"names":[],"mappings":""}